verification after infection

el_sauvageon · Dec 18, 2009

hello,

so i've been infected by some malware who have change some *.sys files on my HD (look like a bager infection but i am not sure... yes i know that's it's all my fault:-o)... after a week to restore my hard drive because of my unknowledge of informatique language he's seems to be clean know... but who know that ... not me! rolleyesSo
to be sure that i am now in a safe place, i want your judgement on my log files...PLEASE...

I'm waiting now your response (that i hope to be well)

thank a lot

ps: I have the rootrepeal files rapport that i can't display because of his size...so i cut it in two files and give you that in a reply...

el_sauvageon · Dec 18, 2009

I know that bump 's not the cure but it's just to upload my last log... View attachment rapport rootrepeal_files1.txt

View attachment rapport rootrepeal_files2.txt

View attachment SUPERAntiSpyware Scan Log - 12-18-2009 - 15-45-26.log

View attachment mbam-log-2009-12-18 (17-50-25).txt

chaslang · Dec 21, 2009

Welcome to Major Geeks!

Your logs are clean.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 6 of the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

el_sauvageon · Dec 21, 2009

hello,

I feel better now:wave!

I have just one little question about the next step:

Can I left MGtool on my desktop or is better to remove this program? if you tell me to remove it can i know why?

thanks for your time...

chaslang · Dec 22, 2009

el_sauvageon said: ↑

I have just one little question about the next step:

Can I left MGtool on my desktop or is better to remove this program? if you tell me to remove it can i know why?
Click to expand...

No you should not keep it!

First it does not belong on your Desktop

But the main reason is that it changes frequently, and you must always download and use the current version that is in our link.

Also, this is not a program that you should be running unless you are working with us to do a cleanup. It is not a malware scanner/removal program. It will not automatically detect and report nor remove malware for you. It is an information collector and the info that it is collecting helps only experts like us to work up specialized fixes.

You're welcome. Surf safely.

Log in or Sign up

verification after infection

el_sauvageon Private E-2

Attached Files:

rootrepeal_shadow ssdt.txt

rootreapeal_stealth objects.txt

rootrepeal_ssdt.txt

MGlogs.zip

el_sauvageon Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

el_sauvageon Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member