pop ups and other problems

Discussion in 'Malware Help (A Specialist Will Reply)' started by jiujitsustudent, Dec 31, 2010.

  1. jiujitsustudent

    jiujitsustudent Private E-2

    I did the read me first however I still have crazy stuff in registry like pornoxxx and gay on gay...I havent visited any of these site. my computer also highlights word and then pop ups appear when you cursor over them. Many things that are highly annoying. here are my four logs. I DONT KNOW WHAT TO DO NEXT. NOTHING WORKS GETTING RID OF ALL THE CRAP ON MY COMPUTER
     

    Attached Files:

  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Where? I am not seeing anything like that :confused

    Running from: c:\users\debbie\Downloads\ComboFix.exe <--- You should not be running combofix from this location! It clearly stated in the R&R to download to and run from the DESKTOP. Please move it there now.

    Java(TM) 6 Update 3 <-- Uninstall outdated version of Java

    I am seeing the below installed. Tell me exactly which software you are using from symantec? (Don't forget to address this question)
    • LiveUpdate 3.2 (Symantec Corporation)
    • LiveUpdate Notice (Symantec Corporation)

    Please attach the following logs.
    • C:\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2010-12-29 (10-40-01).txt
    • C:\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2010-12-31 (00-25-54).txt

    Please download and run SUPERantispyware as per the instructions as you missed this step!

    Now we need to use ComboFix
    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
    • If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
    • Open Notepad and copy/paste the text in the below quote box. Ensure you scroll down to select ALL the lines:
    Code:
    KILLALL::
    
    DirLook::
    C:\ProgramData\33381
    C:\Program Files\Search Toolbar
    RegLock::
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    "MSCurrentCountry"=dword:000000b5
    
    • Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
    • At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
    • You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    • Now use your mouse to drag CFscript.txt on top of ComboFix.exe

      http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif

    • Follow the prompts.
    • When it finishes, a log will be produced named c:\combofix.txt
    • I will ask for this log below

    Note:

    Do not mouseclick combofix's window while it is running. That may cause it to stall.

    Reboot your machine and install the most current and up to date version of Java available here at the below link:

    Java Runtime 6

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this. Don't forget the SAS log.

    Let us know of any problems you may have encountered with the above instructions and also let me know how things are running now!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds