Kaspersky still thinks something is wrong. Hitman found something.

Discussion in 'Malware Help (A Specialist Will Reply)' started by outbackmum, Nov 3, 2013.

  1. outbackmum

    outbackmum Private E-2

    Hi, Have completed read me first procedures, logs attached. Kaspersky still isn't happy. Something is lurking, but the machine is running better than it was. IE wouldn't run much at all before, but is fine now. Thankfully I had Chrome installed, so I used that instead, which worked well.
    Thanks for your help.
    Cheers,
    Sara
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    • Exit any programs that you may have started. Shutdown protection software too.
    • Please disconnect any USB or external drives from the computer before you run this scan!
    • Rerun RogueKiller ( if running Vista,Win7, or Win8 user right-click and select Run as Administrator to run ) for WinXP and Win 2K just double click to run
    • Wait until Prescan has finished
    • Then Click on "Scan" button
    • Wait until the Status box shows "Scan Finished"
    • click on "delete"
    • Wait until the Status box shows "Deleting Finished"
    • Click on "Report" and attach the content of the Notepad into your next reply.
    • The log should be found in a new RKreport[x].txt on your Desktop
    • Exit/Close RogueKiller and reboot your PC.
    • After reboot attach the above RogueKiller log.
    • Now run new scans with RogueKiller and also Hitman Pro. Save the new logs and attach them too.
     
  3. outbackmum

    outbackmum Private E-2

    Thanks chaslang, here is the first log from RogueKiller. Now I'll do the rescan and the Hitman Pro scan.
    cheers
    s
     

    Attached Files:

  4. outbackmum

    outbackmum Private E-2

    The second roguekiller scan. Hitman Pro scan. Kaspersky still not happy. "Blacklist of licences corrupted"??
    Cheers
    S
     

    Attached Files:

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    This is not a malware problem. It is a problem with Kaspersky's database. Try the below which I have picked up from a thread at Kaspersky's where someone else had this problem. Not sure if all the clicks and titles are still the same. I do not use Kaspersky so I cannot test it.

    In Kaspersky click

    Settings > Advanced settings > Threats and exclusions > Detection types > Settings > enable Other > ok>ok, and do a databases update > reboot

    Basically it seems you database is corrupted and needs to be fixed. Perhaps the below would also be useful:

    http://support.kaspersky.com/7673
     
  6. outbackmum

    outbackmum Private E-2

    Awesome thanks Chaslang. It now all seems good - so long as you are happy with the logs.
    Cheers
    Sara
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Yes your last logs were good.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:
      • Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore
      • What we want you to do is to first disable System Restore to flush restore points some of which could be infected.
      • Then we want you to Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds