hijack this log

Discussion in 'Malware Help (A Specialist Will Reply)' started by starrekin61, Feb 11, 2013.

  1. starrekin61

    starrekin61 Private E-2

    Could someone please take a look at my HJT log? System is an hp pavillion G6. everything, especially internet running slow. noticed after installing required update from hp. (had to remove my web search which loaded itself after either: weatherbug or daily bible quotes. all scans say nothing is wrong. Just wanted another set of eyes to look at hjt kog. Thanks in advance people.:)

    Logfile of Trend Micro HijackThis v2.0.4
     
    Last edited by a moderator: Feb 12, 2013
    starrekin61, Feb 11, 2013
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    TimW, Feb 12, 2013
    #2
  3. starrekin61

    starrekin61 Private E-2

    Hi Tim. All scans run as per post.

    Malware-bytes & TDSSkiler reported everything okay - wouldn't allow to save a log.

    Here are the others: Note the Hitman Pro found the Babylon Search that I couldn't find with anything else.

    Thanks for the help.
     

    Attached Files:

    Last edited: Feb 12, 2013
    starrekin61, Feb 12, 2013
    #3
  4. starrekin61

    starrekin61 Private E-2

    Hello, again. Just a quick note - after running all scans, windows updated. Could be why everything was so slow. I still need help however, with the above scans and possible malware removal. Thanks.

    I have also attached the HJT log again (I ran it after the other scans completed.
     

    Attached Files:

    starrekin61, Feb 12, 2013
    #4
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Re-run Hitman and have it fix all that it found. Then tell me what issues you may still have, if any.
     
    TimW, Feb 13, 2013
    #5
  6. starrekin61

    starrekin61 Private E-2

    Hi. Ran Hitman Pro & deleted all hits. Babylon Search still enabled on IE and a pop-up comes on with Chrome. Below is part of the web address of the pop-up - the rest of it is a whole lot of random letters/symbols. It comes up as soon as chrome is opened - with google as the home page. Hopefully someone knows what is going on. Thanks. :confused

    nym.1.ib.adnxs.com
     
    starrekin61, Feb 13, 2013
    #6
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.
     
    TimW, Feb 14, 2013
    #7
  8. starrekin61

    starrekin61 Private E-2

    Hello, Tim. Attached is the JRT log. Babylon Search is no longer on IE. Google still has pop-up windows coming up when opened. they say: ad.reachjunction.com/rw?title....followed by a whole alphabet or two. Now what? Should I run HJT again?
    PS Thanks for the help here. I really appreciate it.
     

    Attached Files:

    • JRT.txt
      File size:
      16.7 KB
      Views:
      0
    starrekin61, Feb 14, 2013
    #8
  9. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Re-scan with both RogueKiller and Hitman and attach those logs.
     
    TimW, Feb 15, 2013
    #9
  10. starrekin61

    starrekin61 Private E-2

    Hello again, Tim. Attached are the Rogue Killer and Hitman logs. Thank you again for helping me with this.
     

    Attached Files:

    starrekin61, Feb 16, 2013
    #10
  11. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Looks good. What issues are you still having, if any?
     
    TimW, Feb 17, 2013
    #11
  12. starrekin61

    starrekin61 Private E-2

    Only issue is when I run Chrome - a pop up window keeps coming up and staying there. even with nothing but home page google on.
     
    starrekin61, Feb 17, 2013
    #12
  13. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Uninstall Chrome, then run CCleaner to remove any leftovers. Reboot and re-install Chrome and tell me if you still have issues with it.
     
    TimW, Feb 17, 2013
    #13
  14. starrekin61

    starrekin61 Private E-2

    Hi again. This will be the 2nd uninstall of Chrome then. It was chrome that was messed up to begin this. i will try this again though. if i leave the chrome window open, this pop-up continues on its own to come up - i had it up a bit ago while cooking, & 9 windows of pop-ups had come up. at the top of each it says : Plug-in missing. will try again and let you know.:(
     
    starrekin61, Feb 17, 2013
    #14
  15. starrekin61

    starrekin61 Private E-2

    it seemed to work this time. thanks. now if i can just get chrome to work right. i'm going to post on that issue in another section. thanks again for the help, Tim. :-D
     
    starrekin61, Feb 18, 2013
    #15
  16. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
    2. Go back to step 4 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    7. After doing the above, you should work thru the below link


    Malware removal from a National Chain = $149
    Malware removal from MajorGeeks = $0
     
    TimW, Feb 18, 2013
    #16

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds