infected w/ win32 skynet HELP...

Welcome to Major Geeks!

Please run step 2 of the SmitFraudFix procedure you ran. Then attach the second rapport.txt log as the procedure requests.

Then complete all of the steps of the READ & RUN ME and attach all of the log requested in the READ ME.

 

Why are you are running this PC without protetction software???

Now Disable Spybot's TeaTimer as requested in the READ & RUN ME

• Run Spybot and click Mode
• Select Advanced Mode.
• Then click Tools and select Resident.
• Now in the right window pane, uncheck TeaTimer.
• Also while this is open, in the left column now select IE Tweaks
• and then in the right pane make sure all the Miscellaneous locks are unchecked.
• Now quit Spybot!

Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

After clicking Fix, exit HJT

Now delete the below file:
C:\WINDOWS\system32\IEDFix.exe

Also delete all files in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
C:\Documents and Settings\Mario\Local Settings\Temp

We need to cleanup some old software junk and also remove some remnants from an incomplete uninstall of Symantec Software.

Uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 11
Java(TM) 6 Update 2
Java(TM) SE Runtime Environment 6 Update 1
LiveUpdate 3.1 (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)

Now run this: Norton Removal Tool (SymNRT)

Now make sure you have rebooted you PC after doing the above.

Now run Ccleaner!


Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created. You can ignore the error message about "The application failed to initialized properly". This is happening because you do not have certain updates from Microsoft installed and cannot run one of the tools in the MGtools folder.


Make sure you tell me how things are working now!