Malware

xjoolee · Dec 23, 2008

Hi, I'm having some problems with my laptop -- Before I did the Read and Run Me First procedures, I was often directed to random spam websites whenever I clicked on a link. If I returned to the previous page and clicked the link again, it would go to the actual website. Other than that, my disk drive pops out constantly; I think it has to do with connecting and unconnecting my AC adapter, but I'm not too sure. I had avast on and Trojans kept getting detected.

After doing the instructions from Read and Run Me First, I tried testing to see if I get redirected to a spam website, but so far since yesterday I haven't. So hopefully that is fixed. The only thing now is that the disk drive still pops out from time to time.

Thanks for taking the time to help me with the malware.

xjoolee · Dec 23, 2008

Here's the last log

dr.moriarty · Dec 24, 2008

:major

Just a quick post to let you know that I'm looking at your logs. Please be patient while I work them over.

But first please uninstall MGTools.exe and the MGTools folders...you are running a very old version. Please return to the current Read and Run first instructions and download and install the latest version and attach the new MGLogs.zip!

Thanks!
dr.m

xjoolee · Dec 24, 2008

I attached a newer mglogs. Thank you again Dr. M for taking the time to help me and have a happy holiday.

dr.moriarty · Dec 24, 2008

Thanks for the updated log... and Happy Holidays to you, too!

dr.m

dr.moriarty · Dec 24, 2008

Your logs look good! If you are not having any other malware problems, it is time to do our final steps:

*I suggest that you start a new thread in the Software Forum for your other issues.

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significan amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (=This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

If we had you run Avenger, you can delete all files related to Avenger now.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware

Click to expand...

Safe surfing! http://i268.photobucket.com/albums/jj5/drmoriarty/Emoticons/char145.gif

Log in or Sign up

Malware

xjoolee Private E-2

Attached Files:

SASlog.txt

mbam-log-2008-12-23 (00-26-23).txt

ComboFix.txt

xjoolee Private E-2

Attached Files:

MGlogs.zip

dr.moriarty Malware Super Sleuth Staff Member

xjoolee Private E-2

Attached Files:

MGlogs.zip

dr.moriarty Malware Super Sleuth Staff Member

dr.moriarty Malware Super Sleuth Staff Member