malware logs

LB915 · Sep 26, 2013

Malware scan logs attached. Please respond with advice. Thanks, Lillian
I browsed for logs and attached but am not sure I have executed properly.

Kestrel13! · Sep 27, 2013

Hi. They didn't attach.

LB915 · Sep 27, 2013

Malware logs
Hopefully you can receive them this time.

Kestrel13! · Sep 28, 2013

Before we continue I would like for you to use MSConfig to put this machine back into normal start up mode

Please re run Hitman Pro and have it delete Potential Unwanted Programs.

http://img805.imageshack.us/img805/9659/rktigzy.gif Fix items using RogueKiller.

Double-click RogueKiller.exe to run. (Vista/7 right-click and select Run as Administrator)
When it opens, press the Scan button
Now click the Registry tab and locate these 4 detections:

[SERVICE][BLVALUE] HKLM\[...]\CCSet\[...]\Services : IBUpdaterService ("C:\Documents and Settings\All Users\Application Data\IBUpdaterService\ibsvc.exe" /SERVICE [x]) -> FOUND

[SERVICE][BLVALUE] HKLM\[...]\CS001\[...]\Services : IBUpdaterService ("C:\Documents and Settings\All Users\Application Data\IBUpdaterService\ibsvc.exe" /SERVICE [x]) -> FOUND

[SERVICE][BLVALUE] HKLM\[...]\CS003\[...]\Services : IBUpdaterService ("C:\Documents and Settings\All Users\Application Data\IBUpdaterService\ibsvc.exe" /SERVICE [x]) -> FOUND

[V1][SUSP PATH] At1.job : C:\DOCUME~1\LILLIA~1\APPLIC~1\DIGITA~1\UPDATE~1\UPDATE~1.EXE - /Check [-] -> FOUND

Place a checkmark each of these items, leave the others unchecked.

Now press the Delete button.
When it is finished, there will be a log on your desktop called: RKreport[2].txt
Attach RKreport[2].txt to your next message. (How to attach)
Reboot the machine.

Delete this:

C:\Documents and Settings\Lillian Brown\Application Data\0D0S1L2Z1P1B

Do you know what these files are for? If not please delete them.

C:\WINDOWS\D

C:\WINDOWS\TMPCPYIS.BAT

C:\WINDOWS\TMPDELIS.BAT

C:\WINDOWS\WININIT.INI

C:\WINDOWS\WINSTART.BAT

C:\WINDOWS\Xgourmet.ini

Re run RK, just a scan and attach log.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista, Windows7 or Win8) Then attach the new C:\MGlogs.zip file that will be created by running this.

Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!

Log in or Sign up

malware logs

LB915 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

LB915 Private E-2

Attached Files:

HitmanPro_20130926_2150.log

mbam-log-2013-09-26 (21-09-23).txt

RKreport[0]_S_09262013_205925.txt

MGlogs.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member