UKASH Popup Read & Run Me Findings

Hi,

I have had a couple of instances while browsing of one of my tabs switching to the "Police Cyber Crime" website which locks my browser until I pay £100. Obviously I don't pay and switch the browser off. The browser opens ok again until a page is hijacked again at some point. I have run through the malware removal read & run me procedure and have the results attached. As far as I can make out the only thing that was picked up were a couple of registry entries by RogueKiller called [HJ Pol] [PUM]. I'm hoping that someone can check the logs and advise me as to what needs to be done next. Incidentally the problem only seems to be affecting my browser rather than the whole operating system as it seems other people have had issues with.

I am running Win7 Starter 32bit on an Asus Netbook,

Thanks for any help.

G

 

Here are the logs.

I am having problems exporting the Malwarebytes log as I can't view the Export button. Basically my screen is so small on this netbook and I can't adjust the box to fit the screen. I'll work out a way though.

Also I have posted two MGLogs. One I performed before turning off the Avira AV software (i.e. MGLogs AV On) and one I did afterwards with the AV disabled (which is named MGLogs)

Thanks again

 

Malwarebytes Log attached

 

Hi Kestrel13!,

Many thanks for your reply. I appreciate you're endlessly kept busy helping people here!

I have selected normal startup from MSConfig.

I have re run Hitman Pro and deleted the elements it picked up. I have also attached the log just in case you wanted to see it.

I have also run the MGLogs.bat and attached the zipped log file.

Since the problem I'm having is intermittent it's hard to say if I'm still experiencing any issues. I'll do some surfing today and get back to you if there are. If not then what are the procedures for cleaning up MGTools etc? It's been a while since I used them.

Thanks again for your work!

Gingerninja

 

Hi Kestrel13!

Ok thanks. I'll have a browse today and get back to you later on.

I ran DDS as I was going to post on the Bleeping Comp site because I'd noticed a few similar issues other users had posted about the Ukash . I didn't get as far as posting a thread though and so no action was taken over the DDS Log. Obviously I always prefer to run things past you guys above any other site though! :-o

I'll be in touch in a few hours.

Thanks again.

 

Hi Kestrel13!

Well so far I haven't seen the problem and so I think you've cleared the issue for me. :major

What steps do I need to take now to clear the system of MGTools etc please?

Thanks once again.

 

Thanks for that Kestrel13!

It's very good to know you are here for us when we need you.

All the best.

:wave