Help. please!!!!

Discussion in 'Malware Help (A Specialist Will Reply)' started by jimrod, Dec 19, 2006.

  1. jimrod

    jimrod Private E-2

    Now sadly I am not pc literate enough to understand all in the read me section first. But not for the want of trying, having printed all the pages. Managed to go into safe mode and spybot showed nothing, likewise AVG anti spyware.
    I keep getting errorsafe, ameaba, casino links, system doctor and have seen smitfraud toolbar888 on spybot previously(but fully expect it to come back)
    Some sites I visit their banners are hijacked by rogues. Including here, where the recommend download at the top should be their is a replacement, winantispyware.
    I had a hijack this analyser and that showed everything to be okay.
    Can anyone help me, this has only started in the last week and I believe linked to my girlfriend trying to download games(innocently but even less clued up than me!!!!)
    Please can someone help, I really have tried following everything but I don't understand so much.
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi Jimrod

    The trick is to go slow and as you have printed the guide off thats a good step as it allows you to tick off each step you complete one by one... its not a race so take your time.

    The guide looks hard at first glance as alot of it is background info to cover many bases, but for instance if you dont have Norton then you dont need to deal with the Norton Protected Recycle Bin section.... just carry onto the next part.

    You've already shown that you can get into safe mode and run scans so the guides steps are no harder than that, BUT remember to unzip any of the downloads if they are in Zip files before using them, and do follow all install or run locations.

    1st check that none of your issues are covered in the Special Removal Procedures if any of them are click the link to the issue and follow the steps, once completed.. go back to the main guide ( Read Me first ) and start with the Preliminary House Cleaning & Setup as this section is crucial.

    If you get stuck at a step stop and tell us what step and why you couldnt complete or run it and we can talk you through it.


    Good Luck :)
     
  3. jimrod

    jimrod Private E-2

    Firstly thanks.

    There is no rush, hence the print off. But things like the runkey, I have no idea how to use it and if I have unzipped it(it keeps coming back to the same part asking to unzip it.

    My AVG log show absolutely nothing but have the log, have my I hijack this log and the panda one. Can post them but the run kay and the other one, I am lost as to what to do.
     
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi Jim


    Yes if you have run the Panda and Hijackthis and have logs yes do attach them, but also we will need to see the other logs too even if they say they found nothing, ie. Bitdefender Online Scan and AVG or Counterspy logs.

    As for ShowNew and Getrunkeys follow the below to the letter.

     
  5. jimrod

    jimrod Private E-2

    Thanks again, I did follow the below to the letter, but just came back to asking me to unzip them. I don't know how to use them.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That means you are not unzipping them, or after unzipping them you are not trying to run the correct file name. You must double click on GetRunKey.bat or ShowNew.bat to run the programs. If you did not exactly follow the directions in step 2 of the READ ME, you will not be able to tell the difference between GetRunKey.zip and GetRunKey.bat (same for ShowNew).

    What program do you use for unzipping? What Windows OS are you running?
     
  7. jimrod

    jimrod Private E-2

    I saved it to my desktop(xphomefile) I left click to open and I run it, I then get a win zip self extractor so I unzip(says three files unzipped successfully), but it keeps coming back to that function.

    I am running Windows home xp, if that is what you were asking.

    Thanks again
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Where did you extract them too? Close the window for the unzipping functions and run Windows Explorer (right click Start and select Explore). Then navigate to where you extracted them. DO NOT click on the ZIP file anymore. Double click the GetRunKey.bat file and then do the same for ShowNew.bat
     
  9. jimrod

    jimrod Private E-2

    unzipped to system 32 looked there could not find, then unzipped to desktop and the same could not find, searched for getrunkey and it's not there. Having to go to work now, will look in later, thanks again.
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should not unzip GetRunKey.zip or ShowNew.zip into the system32 folder. That is not where they belong. While the Desktop would work, I don't recommend doing that either. Do what was requested and make a folder named C:\MGtools and extract both zip files into that folder. It is okay to extract both of them to the same location.

    If you are running Windows Search and cannot find GetRunKey.bat or ShowNew.bat, it means you never actually extracted them from the ZIP file. Where exactly did you download GetRunKey.zip and ShowNew.zip to? Are you downloading the files or are you trying to RUN/Open the ZIP file while connected online???? You should download it and save it to your PC.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds