Has the malware been removed entirely?

Discussion in 'Malware Help (A Specialist Will Reply)' started by hannover, Jul 21, 2012.

  1. hannover

    hannover Private E-2

    Hello,

    Allow me to preface this by saying that my computer seems to be in perfect working order once again, thanks to this site and forum!

    It seems I had the fake File Recovery HDD failing virus (as in this thread http://forums.majorgeeks.com/showthread.php?t=257440 ), and it seems to be having no effect on my computer except that it's showing up in the All Programs list (it's highlighted, as well) by the name File Recovery.

    Is it completely gone? Are there any more steps I should take? I have attempted to attach all the logs requested.

    By the way, if this thread is pointless I have no problem with deleting it.
    Thanks again!

    OH and here's a quick screenshot lol
    http://i.imgur.com/lY9qm.jpg
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    I see you aready ran Unhide. Did this fix all of your missing items?

    Uninstall >> StartNow Toolbar

    Now delete the below folders:
    C:\Users\Buklau\AppData\Local\Conduit
    C:\Users\Buklau\AppData\Local\Conduit

    Also delete the below files:
    C:\ProgramData\-PtUsjZ383nYHqI
    C:\ProgramData\-PtUsjZ383nYHqIr
    C:\ProgramData\PtUsjZ383nYHqI


    Please run RogueKiller to again. If you can then run a scan and after it finishes, select the Registry tab and then select any of the below that exist and then click the Delete button.
    Then immediately reboot your PC if it has not already recommended doing so.

    After reboot, run a new scan with RogueKiller and save a log as in original instructions and attach the new log.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).


    Then attach the below logs:
    • the new RogueKiller log
    • C:\MGlogs.zip
    How are things working?
     
  3. hannover

    hannover Private E-2

    I did run unhide. It was successful in unhiding about 3/4 of my stuff while the malware still had a firm grip on the computer. Now that the malwares pretty much gone all of my stuff is now visible (at least on this user account, not sure on the other).

    I followed your instructions, RogueKiller found only these two items:
    http://i.imgur.com/j6GVs.png

    I chose not to delete them, but rebooted anyway and ran the MGtools scan.
    Here are the logs,
    and yes! Everythings working perfectly. Many, many thanks
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Just one more folder to delete that I missed last time. Delete the below:
    C:\Program Files\Conduit

    Other than that, your logs are clean.



    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
    2. Go back to step 6 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    7. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds