Please help have done the read and run steps

mneenee · Jan 20, 2007

Hello again all,

I am having problems once again lol. I have done all the steps in the read and run me first except for bit defender as it kept freezing on me. I have attatched all logs plus one from smitrem as spybot was detecting that so i ran the program. Thanks for the help.

Mneenee

mneenee · Jan 20, 2007

Here is the rest.

mneenee · Jan 20, 2007

I guess I should give more info. After running a spybot check yesterday it found smitfraud c so i ran the smitrem program. Then i decided to do a panda scan it found something called pskill.n and would not fix it. comp is running super slow but a bit better after running avg. I am running win xp sp2.

TimW · Jan 22, 2007

You have the wrong versions of GetRun and Shownew. Please download the new versions: GetRunkeys and ShowNewfiles.

BigFix...do you need this? It is a resource hog.

Copy the contents of the below quote box to Notepad; Save As FixReg.reg to your Desktop; make sure File Type: is set to All Files (*.*).

REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1426AC5-8CE5-4A00-B71E-011D35709AC6}]
Click to expand...

Close Notepad.

Locate FixReg.reg on your Desktop. Double-click on it and answer 'Yes' when asked if you want to merge with the registry.

Now reboot into safe mode and delete the following files:

C:\Documents and Settings\Randy\Application Data\Mozilla\Firefox\Profiles\3eji5cdo.default\cookies.txt[.hitbox.com/]
C:\Documents and Settings\Telia\Cookies\telia@go[1].txt
C:\Documents and Settings\Telia\Local Settings\Temp\upd25.exe[²ÜÇ\DetectionProcessus.dll]
C:\Documents and Settings\Telia\Local Settings\Temp\upd25.exe[¦++\{²áÇ}\Update.exe]
C:\Documents and Settings\Telia\Local Settings\Temp\upd25.exe[¦++\{²áÇ}\system.dll]
C:\Documents and Settings\Telia\Local Settings\Temporary Internet Files\Content.IE5\Z6YMT9YS\upd[1].exe[²ÜÇ\DetectionProcessus.dll]
C:\Documents and Settings\Telia\Local Settings\Temporary Internet Files\Content.IE5\Z6YMT9YS\upd[1].exe[¦++\{²áÇ}\Update.exe]
C:\Documents and Settings\Telia\Local Settings\Temporary Internet Files\Content.IE5\Z6YMT9YS\upd[1].exe[¦++\{²áÇ}\system.dll]
Click to expand...

Download and run: Ad-Aware SE

Also re-run CCleaner.

mneenee · Jan 22, 2007

Hi Tim,
First of all thanks for the help I really appreciate it . I have done all the things you told me to do and my pc seems to be running smoothly now. The windows security alert is not coming on anymore and I seem to be running at normal speed. I have attatched new getrun and shownew files do you want a HJT as well? If so I will post one just let me know. As far as Big Fix goes it is part of Emachines help program I never use it though do you think it would be safe to remove it? Thanks a bunch!!!

Mneenee

TimW · Jan 22, 2007

Your logs look clean. You may now uninstall any programs that we asked you to download for the analysis.

Yes, you can safely remove BigFix thru Add/Remove Programs in the Control Panel.

Be sure to follow the last part of the Read and Run First instructions:
Once you are sure all malware problems have been removed follow the below steps:

Disable System Restore ( see Disable And Enable System Restore )

Now reboot your PC

Now Enable System Restore using the same link as above.

See the following thread and complete the steps: How to Protect yourself from malware!

mneenee · Jan 22, 2007

Ok will do thanks allot!

Mneenee

TimW · Jan 22, 2007

Your welcome!

Log in or Sign up

Please help have done the read and run steps

mneenee Corporal

Attached Files:

smitfiles.txt

Activescan Pro.txt

runkeys.txt

mneenee Corporal

Attached Files:

newfiles.txt

hijackthis.log

AVG.txt

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

Attached Files:

runkeys.txt

newfiles.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member