Problems removing malware/virus

zachstu · Aug 6, 2009

I ran super antispyware and it detected a tojan which then i removed. Now when i scan for about 4mins superantispyware crashes at the point around HKLM/system/controlset001/services/ .

This piece of malware causes iexplore.exe to start every so often and i hear it moving through the web but nothing is echoed to my screen.

Malwarebytes does not run.

I have tried in safe mode. Main problem is superAntiSpyware crashing, it is updated.

So i need help

zachstu · Aug 7, 2009

i did an mgtools scan

TimW · Aug 9, 2009

Were you unable to run ComboFix? I would like that log as well. But first lets do this:

Please make sure msconfig is set to normal startup.

Please use add/remove programs to uninstall:
Viewpoint Media Player <-- should have been uninstalled in step 1 of the READ ME

I see you already have avenger installed. So first disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

* Run avenger.exe by double-clicking on it.
* -Do not change any check box options!!
* Copy everything in the Quote box below, and paste it into the Input script here: part of the window:

Files to delete:
C:\Program Files\AV Care\AvCare.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\a.exe
C:\WINDOWS\Tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job
C:\WINDOWS\TasC:\WINDOWS\system32\net.net

Folders to delete:
C:\Program Files\AV Care
C:\Program Files\M

Registry values to delete:
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AV Care]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Monopod]
Click to expand...

* Now click the Execute button.
* Click Yes to the prompt to confirm you want to execute.
* Click Yes to the Reboot now? question that will appear when Avenger finishes running.
* Your PC should reboot, if not, reboot it yourself.
* A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

Then attach the below logs:
* C:\Avenger.txt
* C:\ComboFix.txt
* C:\MGlogs.zip

zachstu · Aug 9, 2009

thanks anyway but I already reformatted

TimW · Aug 12, 2009

Sorry to here that....but good to know you are back up and running.

Log in or Sign up

Problems removing malware/virus

zachstu Private E-2

zachstu Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

zachstu Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member