Okay, clean from scanners but remnants

Discussion in 'Malware Help (A Specialist Will Reply)' started by roberts663, Sep 24, 2012.

  1. roberts663

    roberts663 Private E-2

    I know there are a few remnant registry keys but don't wanna mess with them as I know they can reset really bad files. Dled some stupid file I thought was safe one morning. Anyways my computer was still sluggish after scans, than used Microsoft FixIt tools and made it run a lot better. Still some icons look different, and I don't think my administrative rights are setup as default. Also my IE browser has some search.conduit.com that is a bing search, but I think it slows the browser down overall and would like to get rid of that too.

    Here are my logs, any performance, registry or remnant advice would be awesome!

    thanks
     

    Attached Files:

  2. thisisu

    thisisu Malware Consultant

    Hello roberts663,

    http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.
    • Please save the work in your browsers before proceeding.
    • Shut down your protection software now (antivirus, antispyware...etc) to avoid possible conflicts.
    • Double-click JRT.exe to run (Vista/7 right-click and select Run as Administrator)
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete.
    • Please ignore any and all error messages as these are normal.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Please attach JRT.txt to your next message. (See: HOW TO: Attach Items To Your Post )
     
  3. roberts663

    roberts663 Private E-2

    very cool software man. Conduit is now gone from IE and it is running faster, I can already tell upon opening it and navigating here. I like Chrome better, but there's still some things Chrome doesn't work for at all and I have to use IE for it.
    Here's the log!
     

    Attached Files:

    • JRT.txt
      File size:
      938 bytes
      Views:
      8
  4. thisisu

    thisisu Malware Consultant

    Thank you. I'm glad to hear that it has helped. :)

    Are you experiencing any other issues?
     
  5. roberts663

    roberts663 Private E-2

    Not really, everything seems to be running normally, I can't find a remnant on any alternate scans and a few other anti spyware stuff I tried. My icons were changed and look different with .exe files and the recycling bin icon too, but that's not a big deal, lol. I think my administrative rights were changed, even though it said i was the administrator i don't think it was working when i was infected right, but I think the scans and winfixits fixed that. Some programs were saying I needed to be an administrator to perform or open them, but I haven't seen that message pop up the last 2-3 days. I'm going to smack myself the next time I open an attachment from an email address I don't recognize, don't care how tired I am when I do it, lol.
     
  6. thisisu

    thisisu Malware Consultant

    If you are not having any other malware related problems, it is time to do our final steps:
    • Any programs we had you download and/or install can be removed at this time.
    • If we had you download and run ComboFix, here is how to uninstall it:
      • Press and hold the Windows key http://i1106.photobucket.com/albums/h363/debojyotidas/Windows_Logo_key.gif and then press the letter R on your keyboard.
      • This opens the Run dialog box.
      • Copy and paste the below text inside the text-field:
        • "%userprofile%\desktop\ComboFix" /uninstall
      • Now press ENTER
      • ComboFix will extract its files one last time and you should receive a notification that ComboFix has been uninstalled shortly after.
    • You can re-enable your Disk Emulation software at this time via DeFogger.
    • If we had you create or download a registry patch or "fix" script, these can be deleted at this time.
    • Go into the C:\MGtools folder and run the MGclean.bat file to remove additional traces of our tools.
    • Now we will toggle System Restore to remove any infected system restore points.
    • Lastly, here is a guide to protect you from future infections: How to Protect yourself from malware!
    • Be safe :)
     
  7. roberts663

    roberts663 Private E-2

    Excellent, thanks again for getting rid of that stupid conduit redirection.
     
  8. thisisu

    thisisu Malware Consultant

    No problem. Be safe.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds