Malware Problems

my laptop was recently infected by spyware, i have sucessfully removed spy quake that infected my computer and i believe i have completed the guide. i do not however have a Bit defender scan log, but i have a Panda scan log and a HJT log.

you will see that nortons and Antivir is installed however, norton's is not activiated, and is not working.

so far, antivir has showed me a lot of viruses infecting my computer but each time i delete them they show up again.

 

You have browser windws open whilst running HijackTHis Please Make sure they are closed even this one you are reading in.

Please rename hijackthis to analyse.exe as per step 7 of the readme and post a new log.

You have 2 Antivirus Applications installed. This is a bad idea and can cause all sorts of problems. Pick one and uninstall the other.

WHy ? Remove it.

DId you encounter problems running bitdefender ?

How did the other scans (windows defender, adaware) work out for you ?

Your activescan logs show infections in your temporary internet files folder. Did you run CCleaner and empty temp folders before the scans ? DO this now as per step 5 in the readme and post a new log.

<< The installed version of Java on this compter is out-dated. Install version 1.5.0_07 available from http://www.java.com/en/download/manual.jsp. Uninstall all older versions of Java on your computer, before installing the latest version of Java. >>

Windows Messeger is running in the background on this computer, and represents a security risk. Disable Windows Messenger by running Shoot The Messenger. If you are using this as your IM client then replace it with MSN Messenger.

 

I can't seem to find the download to uninstall norton's becuase everytime i try to regularly uninstall norton's is locks up and doesn't work.

 

Check out the Norton Remoal Tool

 

Norton's is removed.
Bitdefender i did not have a problem it's just that the screen was closed by my dad so i didn't get the scan results.

All scans worked except windows defender, i didn't have Window's service Pack 2 installed on this laptop.
and thanks for the help dude.

 

Follw the directions for the following Procedures:
SpywareQuake & SpyFalcon Removal Procedure
Virtumonde aka Trojan Vundo Removal

When finished post the logs from SmitRem and VundoFIx.

Also post fresh logs from BitDefender Online, Panda ActiveScan; and a fresh HijackThis log.

 

Ok dude, i ran the checks and everything, but dude, i don't have Spyquake etc, smitrem found nothing, but i did have a lot of vundo files that it deleted.

thanks for all your help man.

EDIT: oh yeah, i didn't know how to get a log of Vundo and Smit, i just know that vundo deleted atleast 6-7 files easily.

 

I need help really bad now, my computer goes whack whenever i use if for a certian period of time, i can't open programs like notepad, firefox, and mircsoft word functions don't work. when i log off and log back on, everything is fine. what could that be?

 

I really apologize for posting three times in a row, i don't see the edit button.

I decided to try and clean the HJT log myself, i think it's pretty clean.
Also about the program problem where programs wouldn't load, i think i have it fixed so far but i'm still waiting to see.

 

Download
- Pocket Killbox
- ExplorerXP

You really shouldn't being fixing things in HijackThis without guidance. You can cause real damage to the Operating System, if you remove the wrong item.

Empty the Internet Explorer Cache
Empty the Norton Protected Recycle Bin
Empty the Recycle Bin

In HJT Choose Open the Misc Tools Section choose Process Manager, Highlight:

Choose Kill Process

Now Run HijackThis. Click the 'Do a system scan only' button. Place a checkmark in the box next to the following lines:

Click on the 'Fix checked' button. Wait for HijackThis to finish; close HijackThis.

Now run Pocket Killbox:

Choose Tools -> Delete Temp Files and click the RED X.

Run Killbox.exe. Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot. Note many of the file list below may not exist but we need to check for them anyway.

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

Now boot into SAFE MODE

Open ExplorerXP navigate to and DELETE the following: (Some of these may have already been deleted by Pocket Killbox)

Now run CCleaner. If you have Windows XP delete the contents of C:\WINDOWS\Prefetch.

Then, as an added precaution, Go to Start -> Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
Temporary Files
Temporary Internet Files
Recycle Bin

And Click OK.

REBOOT to Normal Mode.

Post a fresh HijackThis log.

 

Thanks for the reply, but i was using your guide for HJT.

 

Your HijackThis log is clean.

How is your computer running?

 

It's running great, thanks for all your help man, i really appreciate it, i'm going to now re-enable my system restore.

 

Lets flush all your restore points and create a new clean one for your system.

How to Protect yourself from malware!

Safe surfing.