Virus/Spyware Attack

Welcome to Majorgeeks!

You must follow the directions in the below exactly! HJT logs by themselves are of no use to us. And you MUST install and renamed HijackThis properly.

For any steps that you cannot run, explain which ones and why and what happens. You must try to do all steps. If you can get HJT to run you can get other steps to run too.

Do this first! Download HOSTER and then follow the below steps.

• Unzip Hoster to a convenient folder such as C:\Hoster
• Run Hoster.exe, click Restore Microsoft's Hosts File and then click OK.
• Click the X to exit the program

Now please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, renaming, running, and posting HijackThis logs as attachments.

• Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
• Make sure you check version numbers and get all updates.
• Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

• After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis​

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.​

• When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
  • CounterSpy
  • AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy
  • Bitdefender - from step 6
  • Panda Scan - from step 6
  • runkeys.txt - the log from GetRunKey.bat
  • newfiles.txt - the log from ShowNew.bat
  • HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

 

The READ & RUN ME has specific instructions in step 7 about how to install HijackThis and renaming it. I even emphasized this information when I posted the below to you in message # 2:

You ignore both step 7 and this bold print message. You have the below:


C:\Documents and Settings\Owner\Desktop\Virus Removal\HijackThis\HijackThis.exe

You also need to uninstall Viewpoint Media Player as requested in step 0 of the READ ME. Do this now.

Also in step 0 of the READ ME, we specfically stated that you must not use MSconfig to control startups and that you must run MSconfig and select Normal Startup. You did not do this. Do it now.

After doing the above, please follow the diretions given in step 7 and attach a new HJT log. We cannot continue until you do this. You have or had the infection type that makes it critical to follow these instructions directions.