I've been hit... please help!

bgunn · Nov 12, 2007

A few weeks ago while online, I had this program attempt to install itself onto my system (AVSpyGuard), I thought I had stopped it and removed all items linked to it but obviously not... since then I have had many different things happening and stuff like Trojan.Vondo, Downloader, Downloader.msapp either try to hit my system or have hit my system but been taken care of by Norton.

Currently, the major issue is when I go online and either jump sites or use a trusted link not only does that site/link come up but so does another window with a website such as Heavy.com, Searchfeed.com, Oursearch.com etc etc.

I have tried the various items that I have to try and remove the problem (Norton, Ad-ware, Adv. Spyware Remover) but no luck to date. I have downloaded and run the MajorGeeks (3) main reports for debugging (see attached).

I have gone into Safe Mode which I think due to the infection is not running like it should... so I am hoping that someone here can assist me in cleaning my system. Thank you.

TimW · Nov 12, 2007

You did not attach the logs from:
Counterspy / AVG-Antispyware (one or the other)
Panda scan
Bitdefender

You need to rename: C:\Program Files\HijackThis\HijackThis.exe --> C:\Program Files\HijackThis\Analyse.exe

Download this file to your desktop - Combofix.exe
Double click combofix.exe & follow the prompts.
When finished, it will produce a log for you. Attach this log to your next reply

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

Attach new logs for:
ShowNew
GetRUnKeys
HJT
ComboFix

Log in or Sign up

I've been hit... please help!

bgunn Private First Class

Attached Files:

2007-11-06 hijackthis report.txt

2007-11-06 Get RunKeys Report.txt

2007-11-06 ShowNew Report.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member