Problems form Iraq

Hi Chad and Welcome to the forum

Best bet to fully check out your PC and find any trojans and malware on your PC is to follow our guide to removing malware, what it does is show you in steps how to systematically clean up the areas malware hides in then using the online scans and software listed is to attach the logs and our experts in these areas will look over the logs and post steps for you to follow in removing any left over nastys.

the thing these days is if you have a trojan its likely you will have a few other malware infections also, so its best to remove all found.


Our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

• Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
• Make sure you check version numbers and get all updates.
• Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

• After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.


​

• When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
  • CounterSpy - ONLY IF you were not able to run Windows Defender
  • Bitdefender - from step 6
  • Panda Scan - from step 6
  • runkeys.txt - the log from GetRunKey.bat
  • newfiles.txt - the log from ShowNew.bat
  • HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

 

Chad,

It will be important for you to follow the directions given in Halo's post. Winlogonhook often comes along with a Virtumonde infection and there can be several hidden files and infected registry keys to go along with them (sometimes there are many hidden files). In order to locate all of these files, we need all of the logs from the tools mentioned in Halo's post. We fix many of these each week and we will be able to fix yours too as soon as we get the reuqested logs. Some of the scans (like Bitdefender & Panda online scans) can take awhile to run but they help us uncover ALL of the malware. Our goal is to remove all malware, not to just bandaid the outward visible effects that you may only be noticing.