Virus Burst

Discussion in 'Malware Help (A Specialist Will Reply)' started by Carlko, Sep 17, 2006.

  1. Carlko

    Carlko Private E-2

    I have this on my system. I've gone through the RUN AND READ procedures. Please find attached all the required files along with one called "Sandra" which is my system summary.

    Any Help is much appreciated.
     

    Attached Files:

  2. Carlko

    Carlko Private E-2

    Attachments Continued
     

    Attached Files:

  3. Carlko

    Carlko Private E-2

    Since I posted this I ran Smitfraudfix, found at http://siri.urz.free.fr/Fix/SmitfraudFix.zip
    and that has taken care of the pop up. I still show the program in my quick launch and would appreciate any advice on how to remove it.
    Thanks.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What options from SmitFraudFix did you run? Attach the log from it called rapport.txt.

    Make sure the below folder and file were deleted:
    C:\Program Files\Virus-Burst <--- the folder
    C:\WINDOWS\system32\syycum.dll

    You also need to uninstall the below if still showing in Add/Remove programs:
    Internet Explorer Security Plugin 2006
    Internet Security Add-On
    Safety Alerter 2006

    Also Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Now install the current version of Sun Java from: Sun Java Runtime Environment

    Then uninstall the below old versions of software:
    J2SE Runtime Environment 5.0 Update 5
    J2SE Runtime Environment 5.0 Update 6

    Reboot your PC now! How are things working now? If still having problems, attach new logs from GetRunKey, ShowNew and also attach a HijackThis log.
     
    Last edited: Sep 18, 2006
  5. Carlko

    Carlko Private E-2

    I just ran Smit without changing any of the defaults.

    I've done the new procedures and still have the icon in quick launch. I get the balloon on boot up, but after it disappears it doesn't come back.
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please complete the rest of my instructions in message # 4.
     
  7. Carlko

    Carlko Private E-2

    Missed the last line - will do, thanks.
     
  8. Carlko

    Carlko Private E-2

    OK - new files attached.
     

    Attached Files:

  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Goto Add/Remove programs and uninstall the below:
    eMusic - 50 Free MP3 offer

    Now run HijackThis and fix the below line:
    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

    Now exit HJT!

    Now Copy the bold text below to notepad. Save it as fixWLK.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Now we need to Reset Web Settings:
    1. If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
    2. Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
    3. If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.
    Note for IE 7 users: You need to select Internet Options then the Advanced tab and then Reset Internet Explorer Settings!

    Now delete all files in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
    C:\WINDOWS\temp
    C:\Documents and Settings\Compaq_Owner\Local Settings\Temp

    Now reboot your PC and let me know if you are still having problems! If you see a balloon, tell me exactly what it says.
     
  10. Carlko

    Carlko Private E-2

    Fixed!!

    Thanks a bunch.
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome!

    If you are not having any other malware problems, it is time to go back to step 1 of the READ & RUN ME to Disable System Restore which will flush your Restore Points. Then reboot and enable System Restore to create a new clean Restore Point.

    After that, you should work thru the below link:

    How to Protect yourself from malware!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds