Gateway Laptop FUBAR'd

Netmondo · Oct 18, 2006

Hello there. I have been trying to clean this thing up using your directions and I am now posting what I have. I have never seen this kind of malware but then again I'm very conservative on the web. This was not done in SAFEMODE because F12 does not work on this laptop for some damn reason.

The one thing I can't seem to get rid of is an annoying Windows looking pop up that is in the startup tray. I tells you to click a ballon to get rid of "TrojanSpy.Win@32mx." When you click the ballon it takes you to a site that tries to sell you software to get rid of it. Imagine that!!

I am doing this for a coworker. Any help you can give would be appriciated.

Anyway here is the GetRun, ShowNew and Hijack files.

If for some reason this isn't what you want let me know and I'll do it over..

DavidGP · Oct 19, 2006

Hi

Well I would go over it again, for just a few minor points, the HJT log was run from a place me advise not to run it from as in C:\Documents and Settings\Owner.GIR\Desktop\Analyse.exe and did the Panda and Bitdefender scans show nothing?

but you should be able to get into safe mode by going to Start > Run and typing msconfig > enter then choose the Boot.ini tab and tick /SAFEBOOT > apply then reboot ( to get back to normal boot, reverse the process and untick /SAFEBOOT > apply )

The guide again for ease of finding....
Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Log in or Sign up

Gateway Laptop FUBAR'd

Netmondo Private E-2

Attached Files:

runkeys.txt

newfiles.txt

hijackthis.txt

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member