Followed Malware Removal Guide and still having problems please help.

Discussion in 'Malware Help (A Specialist Will Reply)' started by Sherris88, Jul 10, 2015.

  1. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay try this next because I have a strong feeling that it is the source of the proxy setting.
     
  2. Sherris88

    Sherris88 Private E-2

    Removed smart app, ran rougekiller and proxy entries still showing up.
     

    Attached Files:

  3. Sherris88

    Sherris88 Private E-2

    Oh yeah here is the MGlogs you rquested, ran in safemode
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay but now use RogueKiller to remove them. Then reboot and run a new scan to see if they still appear.

    Previously you had two additional items like below which meant 4 lines. And now you have only two line:

    [PUM.Proxy] (X64) HKEY_USERS\S-1-5-21-521916397-739644250-3185766717-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found
    [PUM.Proxy] (X86) HKEY_USERS\S-1-5-21-521916397-739644250-3185766717-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found
     
  5. Sherris88

    Sherris88 Private E-2

    That worked Thank you. The proxy entries did not show up on rougekiller this time. :)
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then this confirms my suspicion that SmartApp was the cause of the proxy settings. It also explains why our attempts to remove seemed to fail. SmartApp was just putting back what we had removed.

    You can reinstall it now since you use it but just remember for the future that you are using the proxy.

    Kestrel13! can finish off final instructions now.
     
  7. Sherris88

    Sherris88 Private E-2

    If I do reinstall the app how do I set my google chrome to automatically connect to the proxy so I do not have to go in and change it every time
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm not sure what you mean. I assume that when you reinstall SmartApp it will just do whatever it did previously.
     
  9. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others) and running MGclean.bat did not remove them, you can delete these files now.
    3. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    4. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    5. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    7. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

    8. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds