Need Help Please

Rockfish · Oct 21, 2008

I ran the trendmicro online scanner and it told me I had the following problems; TSPY_MAHA.AF, TROJ_DELF.FWH, BKDR_HUPIGON.MY. I have followed all the instructions in the read me section and I was wondering if someone could please look at my logs and help me out. My main problems have been; my computer has been running slower and I've had my paypal account hacked several times. I guess that is where the keyloggger comes in. Any help would be great.
Brooke

Rockfish · Oct 21, 2008

The rest of my logs.

TimW · Oct 22, 2008

Just a few questions.
What are these:
C:\Documents and Settings\Brian Simkins\Application Data\mjusbsp
C:\Documents and Settings\Brian Simkins\Local Settings\Application Data\tjnet

You need to use add/remove programs to uninstall the following:
J2SE Runtime Environment 5.0 Update 6"
Java 2 Runtime Environment, SE v1.4.2_03
Viewpoint Media Player

Reboot and install:
Java Runtime 6

Rockfish · Oct 22, 2008

Thanks for taking a look at my problem.
This is for Magic Jack, it is what I use for my phone.
C:\Documents and Settings\Brian Simkins\Application Data\mjusbsp
I don't know what this is, there is a file in it called "cdloader" should I delete it?
C:\Documents and Settings\Brian Simkins\Local Settings\Application Data\tjnet

I've installed and uninstalled the items you asked me to. Is there anything else I can do?

Thanks again.

TimW · Oct 22, 2008

They are phone related......so not to worry.

If you are not having any other malware problems, it is time to do our final steps:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

Rockfish · Oct 26, 2008

Thanks so much for your help. I have installed a virus scanner and a firewall. The scanner came up with a few problems the first time, but I've rebooted several times and scanned again and it's come up clean every time. Thanks again.

TimW · Oct 26, 2008

Good to know.....safe surfing.

Log in or Sign up

Need Help Please

Rockfish Private E-2

Attached Files:

SUPERAntiSpyware Scan Log - 10-21-2008 - 10-20-18.log

mbam-log-2008-10-21 (12-03-44).txt

combolog.txt

Rockfish Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Rockfish Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Rockfish Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member