Tr/Crypt.XPack removal

If you have fully followed our procedures then you should have logs from the below:

• SUPERantispyware
• Malware Bytes
• Combofix
• MGTools

Please ensure that they have all been run, or tried to be run and then attach what logs you do have.

 

It looks like the scans took care of the malware. Let's just do this:

Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

After clicking Fix, exit HJT.

Then use windows explorer to find and delete:
C:\Documents and Settings\All Users\Application Data\ISQGBIVFE

You should at the least double the amount of RAM you have installed.

Rename jjjjh.exe back to Combofix.exe.

Tell us what malware issues you are still having, if any.