Please help! tried everything in 'Read this First' post and nothing has worked...

Discussion in 'Malware Help (A Specialist Will Reply)' started by smiley_princess, May 20, 2005.

  1. smiley_princess

    smiley_princess Private E-2

    I hope that someone can help me, I've tried everything in 'Read this first' and nothing works. I'm ready to give up. :(

    I have nail.exe, aurora and clickme canada.exe on my system. I have tried tons of things to get rid of them, but nothing works.

    Here are the programs that I have used so far:
    -Ad-Aware SE
    -Ad-Aware VX2 Cleaner plugin
    -CC Cleaner
    -Spybot
    -Spyware Blaster
    -McAfee AVERT Stinger
    -CWShredder
    -Kill2Me
    -about:Buster
    -HSRemove

    as well as Trend Micro's online virus scan, and Symantec security check.

    I have no idea what else to do.... these popups are driving me crazy!!

    If you can help in any way that would be most appreciated.

    Here is my HJT log:

    edit by bjgarrick: Unrequested inline log removed!


    THANKS!!!
     
    Last edited by a moderator: May 20, 2005
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Fisrt, download ABIremover and save it to a location like C:\ABIremove

    NOW:
    Reboot into Safe Mode, be sure you have ALL browsers closed while running this removal tool.

    Next, start the ABIRemover.exe, press install, wait (explorer window will disapear)

    Reboot directly and attach a fresh HJT log. Be sure you attach the log to your post this time instead of posting it inline.
     
  3. smiley_princess

    smiley_princess Private E-2

    Hi bjgarric,

    I downloaded ABIremover and ran it in safemode. I have attached my new HJT log.

    Thanks,
    smiley_princess
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    You didnt attach anythinghttp://elouai.com/images/yahoo/06.gif
     
  5. smiley_princess

    smiley_princess Private E-2

    Sorry about that,

    here it is :)
     

    Attached Files:

  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Please EXTRACT HijackThis from the ZIP File to a Safer location. Here's how:

    To create a new folder:
    Click START > My Computer > Local Disc C: > Program Files
    Now, Right Click on an Empty Area and select New > Folder & name it HijackThis and ENTER

    To Extract HijackThis:
    Now, Right Click your HijackThis ZIP File and select Extract All > Next > and browse to your newly created HijackThis Folder
    (C:\Program Files\HJT) and click Next.

    Now run HJT from there. Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

    The reason HJT needs its own safe folder is so that backups will be safely preserved. That way, if a mistake is made in the removal process, the mistakenly deleted entry can be restored.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds