Win64/Patched.A

Caterpiee · Dec 12, 2012

I got this problem when installing a file named Mega Codec Pack 9.4, which was corrupted. Now I've followed your guide to remove Malware problems. However at some point I found myself at a forum post telling me to run HitmanPro, before I had reach step 6: "Windows OS Specific Cleaning Instructions" and step 3: "installing Tools and Running Scans " from this link http://forums.majorgeeks.com/showthread.php?t=139681.
That specific forum post told me to delete everything, which was present on the list of infections from hitmanPro except the c:/windows/system32/services.exe, which should be replaced instead.

The problem seems to have removed itself partly by that action, however I still have minor problem with browserredirection. Everytime I open my browser I find myself at this webaddress: "http://home.sweetim.com/?crg=3.1010000.10011&barid={1031DE9F-4301-11E2-849B-E839354D192B}"

Could not upload anymore logs than the ones below, however I do have the other logs ready to load in another post, should you need them.

Can you help me?

Caterpiee · Dec 12, 2012

Decided to just upload the rest of the logs ^^

The log Getunkey.txt is too big to be uploaded on this forum

Kestrel13! · Dec 13, 2012

Please attach the MGlogs.zip file NOT individual files from within it. Thanks.

Caterpiee · Dec 15, 2012

Hi
I appreciate the time you've taken to look through the logs I've already submitted. I have solved the problem below by running scans, clearing cookies and then simply changing the home page of my browser.

Sorry for any inconvenience I may have cause and thank you for your help

Kestrel13! · Dec 15, 2012

Sure all is well?

Caterpiee · Dec 18, 2012

I'm far from sure my computer is ok ^^

My computer works as well as it did before I got infected and I don't get any pop-ups from AVG anti-virus. It seems like all is well

Kestrel13! · Dec 19, 2012

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Go back to step 4 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
related to MGtools and some other items from our cleaning procedures.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 6 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

Win64/Patched.A

Caterpiee Private E-2

Attached Files:

HitmanPro_20121212_1302.log

HitmanPro_20121212_1406.log

GooredFix.txt

MBRCheck_12.12.12_13.21.56.txt

mbam-log-2012-12-12 (13-51-43).txt

Caterpiee Private E-2

Attached Files:

RKreport[1]_S_12122012_02d1348.txt

TDSSKiller.2.8.15.0_12.12.2012_13.18.59_log.txt

TDSSKiller.2.8.15.0_12.12.2012_13.57.44_log.txt

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Caterpiee Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Caterpiee Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member