malware removal from hell

lifer53 · Oct 4, 2006

Thanks for any help the forum can supply. I've tried and even bought several programs to eliminate these problems- i tried every program in your specialty list but they are persistent and getting worse. When online there are windows trying to open and being shut down most of the time. My homepage is hijacked regularly to Ebay or MSN search pages

I now realize i've probably had at least one of these viruses for months, control of keystrokes and keyboard/mouse has been getting slower and wonkier for weeks.

SystemMechanic found litmus virus msqsrv32.exe with 15 dependencies, mprexe.exe (opaserveT virus with 21 dependencies, and suchhosts with 21 dependencies. It didn't have the capability of cleaning them. One of my cleaners found and supposedly cleaned many trojans including BOH virus.

1. I deleted all suspicious stuff by using "Add/Delete Programs" including two blank programs which were persistent.
2. I deleted the contents of all the qarantined files I could find.
3. I can't get to safe mode anymore; enabled viewing of hidden and system files.
4. I disconnected dsl and ran CCcleaner, then Spybot.
5. I run Windows ME so i had to run Counterspy in normal mode.
6. When I tried to run Bit defender the OS froze during scan. Panda scan stopped the OS too. I couldn't make them run.
7. I installed and ran HJT according to Majorgeeks instruction.

Enclosed are all the logs collected from these programs. Thanks again for any help. (sinc i have nine logs, i will post three following posts)
lifer53

lifer53 · Oct 4, 2006

following post

lifer53 · Oct 4, 2006

following post #2

lifer53 · Oct 4, 2006

third and last post, attached log

DavidGP · Oct 4, 2006

Sadly you have no logs attached from the guide, a quick how to on attaching HOW TO: Attach Items To Your Post

but please do follow our step by step guide to the 1st steps on malware removal as they are the only logs we need attaching... guide below,

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy - ONLY IF you were not able to run Windows Defender

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

Log in or Sign up

malware removal from hell

lifer53 Private E-2

lifer53 Private E-2

lifer53 Private E-2

lifer53 Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member