Thankyou to your team

Soulless · Feb 16, 2009

Thought was only right i said thankyou after your "Read and Run me First" thread has cleared the problems i was having.

I had a rather nasty and clever piece of malware on my pc,

Problems it caused :

Spybot could not start
Avg (and all other spy,virus,malware software) could not update
A number of websites could not be displayed mainly manual update sites for software disigned to clear the issues
Google links were being hijacked
Disk Defrag could not run

Downloaded and ran the recommened programs as stated in your thread, problems solved woohoo no PC rebuild ) You guys rule !!

Maleware Bytes was the one that got the nasty little thing in the end, allthough the others did find and fix other issues i believe related to the initial infection.

Again Thankyou for your resources wouldve had to lose alot i didnt want to if i had to rebuild

chaslang · Feb 17, 2009

Welcome to Major Geeks!

Thanks for letting us know that it helped you out.

You should now do the below if you had run our full procedure.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Soulless · Feb 18, 2009

All done

Had decided to keep MB and SAS, as they proved useful

Was suprised to get an infection was allready running Spybot S&D, SpywareBlaster, AVG 8.0, ZA, Sun java and restricted active X controlls.

Cant be sure if the DL was infected or not but problems began just after an install of deamon tools-lite (DLed file and intall now removed)

chaslang · Feb 20, 2009

Soulless said: ↑

Was suprised to get an infection was allready running Spybot S&D, SpywareBlaster,
Click to expand...

Note that Spybot and SpywareBlaster are not giving you any realtime active protection. (That is unless you are running Spybot's Teatimer which is not recommended especially with AVG8 ). They do have things they protect you against but it is not realtime protection. Also remember that no protection is perfect and that your first line of defense is you.

Log in or Sign up

Thankyou to your team

Soulless Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Soulless Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member