Virus Heat, SmitFraud--You name it!!

Discussion in 'Malware Help (A Specialist Will Reply)' started by gypo9999, May 11, 2008.

  1. gypo9999

    gypo9999 Private E-2

    Had a notebook that was severely infected with spyware, viri, trojans and hijackers. Followed the readme on removal and have my machine up and running, but i've noticed long bootup time, even though i've cut down on startups using add/remove programs and spybots startup removal. Any help or advice I could get would be greatly appreciated. The following are my logs. Please let me know if any other info is needed. Thanks in advance for the help.:major
     

    Attached Files:

    gypo9999, May 11, 2008
    #1
  2. gypo9999

    gypo9999 Private E-2

    Her are the other logs to go with the first three. Again, Much Thanks
     

    Attached Files:

    gypo9999, May 11, 2008
    #2
  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If you haven't already, please disable the Guest account in User accounts.

    Please download and install:
    Java Runtime 6

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Now download The Avenger by Swandog469, and save it to your Desktop.

    * Extract avenger.exe from the Zip file and save it to your desktop
    * Run avenger.exe by double-clicking on it.
    * Do not change any check box options!!
    * Copy everything in the Quote box below, and paste it into the Input script here: part of the window:


    * Now click the Execute button.
    * Click Yes to the prompt to confirm you want to execute.
    * Click Yes to the Reboot now? question that will appear when Avenger finishes running.
    * Your PC should reboot, if not, reboot it yourself.
    * A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this and also attach the log from Avenger.

    Be sure to tell us how things are running.
     
    TimW, May 12, 2008
    #3
  4. gypo9999

    gypo9999 Private E-2

    Thanks again for the help! Followed your instructions to the letter. Machine starts up faster but not as quick as i'd like...I'll have to keep in consideration that it is an older machine that's bloated with software and has an external wireless nic. Attached are the logs you requested. Thanks Gypo9999:major
     

    Attached Files:

    gypo9999, May 12, 2008
    #4
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Much better.....lets do one more thing:

    Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Do a search for think-adz and remove any that you find.

    Tell me if you have any other problems.
     
    TimW, May 12, 2008
    #5
  6. gypo9999

    gypo9999 Private E-2

    Computer is running like a well oiled machine!!! Thanks so much for the help. I found that following the malware removal instructions gets the pc to a usable/stable state, requiring only minor tweaking under the guidance of a Majorgeeks expert. I just want to thank you again for the help and let the readers of this forum know that following the removal instructions really does the trick. Just one question. Is there anything you could recommend to help me learn how to read the log files and make the changes you recommended.
    Thanks---GyPo9999
     
    gypo9999, May 14, 2008
    #6
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are very welcome......if you are interested, there is a site called malwareremoval.com

    Or you could just look at the malware threads and compare the fixes and the scans with the posters logs. :)
     
    TimW, May 15, 2008
    #7

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds