1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Remove Dropper.Generic_c.mmi

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by eivissian, Oct 17, 2012.

  1. eivissian

    eivissian Private E-2


    I know there are similatr threads, but here is my Rogue killer text file...

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    We need you to follow ALL of these instructions:

    READ & RUN ME FIRST. Malware Removal Guide

    In the meantime:

    Double-click RogueKiller.exe to run. (Vista/7 right-click and select Run as Administrator)
    When it opens, press the Scan button
    Now click the Registry tab and locate these detections:

    • [HJ INPROC][ZeroAccess] HKCR\[...]\InprocServer32 : (C:\Users\bobs\AppData\Local\{15a750fb-ae13-5d03-ea63-ff2ac48ea9a1}\n.) -> FOUND
      [HJ INPROC][ZeroAccess] HKCR\[...]\InprocServer32 : (C:\$Recycle.Bin\S-1-5-21-2935544495-2401359747-1174938085-1001\$15a750fbae135d03ea63ff2ac48ea9a1\n.) -> FOUND

    Place a checkmark each of these items, leave the others unchecked.
    Now press the Delete button.

    Now click the Files/folders tab and locate these detections:

    • [ZeroAccess][FILE] @ : C:\windows\Installer\{15a750fb-ae13-5d03-ea63-ff2ac48ea9a1}\@ --> FOUND
      [ZeroAccess][FOLDER] U : C:\windows\Installer\{15a750fb-ae13-5d03-ea63-ff2ac48ea9a1}\U --> FOUND
      [ZeroAccess][FOLDER] L : C:\windows\Installer\{15a750fb-ae13-5d03-ea63-ff2ac48ea9a1}\L --> FOUND
      [ZeroAccess][FILE] @ : C:\Users\bobs\AppData\Local\{15a750fb-ae13-5d03-ea63-ff2ac48ea9a1}\@ --> FOUND
      [ZeroAccess][FOLDER] U : C:\Users\bobs\AppData\Local\{15a750fb-ae13-5d03-ea63-ff2ac48ea9a1}\U --> FOUND
      [ZeroAccess][FOLDER] L : C:\Users\bobs\AppData\Local\{15a750fb-ae13-5d03-ea63-ff2ac48ea9a1}\L --> FOUND
      [ZeroAccess][FILE] @ : C:\$recycle.bin\S-1-5-21-2935544495-2401359747-1174938085-1001\$15a750fbae135d03ea63ff2ac48ea9a1\@ --> FOUND
      [ZeroAccess][FOLDER] U : C:\$recycle.bin\S-1-5-21-2935544495-2401359747-1174938085-1001\$15a750fbae135d03ea63ff2ac48ea9a1\U --> FOUND
      [ZeroAccess][FOLDER] L : C:\$recycle.bin\S-1-5-21-2935544495-2401359747-1174938085-1001\$15a750fbae135d03ea63ff2ac48ea9a1\L --> FOUND
      [Susp.ASLR][FILE] services.exe : C:\windows\system32\services.exe --> FOUND

    Place a checkmark each of these items, leave the others unchecked.
    Now press the Delete button.
    When it is finished, there will be a log on your desktop called: RKreport[2].txt
    Attach RKreport[2].txt to your next message. (How to attach)

    Now reboot and re-scan with RogueKiller as well as HitmanPro and attach those logs as well.

    Then Attach the other requested logs.
    Last edited: Oct 18, 2012
  3. eivissian

    eivissian Private E-2

    Ok thanks, will do

Share This Page

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds