systemuptodate.net - help needed!

Discussion in 'Malware Help (A Specialist Will Reply)' started by seanali, May 26, 2006.

  1. seanali

    seanali Private E-2

    This looks like a new version of the old malware "theguardservices.net".
    I need help becuase this has modified and has dialer.dialplatform virus included.
    Can anyone help? tried the previous regedit fix - but no luck.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Sounds like you have had this problem more than once! Why is that?


    Run the below procedure and attach the requested smitfiles.txt log.

    SpywareQuake & SpyFalcon Removal Procedure


    If the above does not resolve your problems, please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
      • Bitdefender
      • Panda Scan
      • HijackThis
    .
     
  3. seanali

    seanali Private E-2

    Chaslng,
    Ran through Spyware/Spquale removal process. I deleted 6 additions to the registry:
    Under C:\Windows\System32\

    atmclk.exe
    dcomcfg.exe
    hp100.tmp (only 3 vairables, not 4)
    ld101.tmp (ony 3 variables, not 4)
    regperf.exe
    simpole.tlb
    stdole3.tlb

    Got rid of the Hijacking issue. Still have an ever present pop-up asking to "download and run Ultimate Defender". If you hit Cancel or try to close thi dialog box, another smaller dialog box pops up and says: " Are you sure you want to exit Setup?"
    This then creates an eternal loop betweeen the two dialog boxes. I will continue the process and see what happens. I just updated my Anti Virus definitions and am running a full scan presently.

    Will work
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to complete my instructions and attach the below logs:

    smitfiles.txt
    Bitdefender log
    PandaActiveScan log
    HijackThis
     
  5. seanali

    seanali Private E-2

    Chaslang,
    I have the log attqachd from the three scans.
    I am still working on this. Any guidance?
    seanali
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You still did not attach the smitfiles.txt log as requested.

    You also have [MessengerPlus3] installed! Did you ignore the warning about it in step 0 of the READ & RUN ME on purpose?

    Also you did not install HijackThis as requested in step 7 of the READ ME. Please fix this now and attach a new HJT log.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds