Zeus Trojan

Stiina59 · Feb 6, 2017

Walked away from my computer and came back to find the messages that if I don't call the number and I close out the page, my computer would be locked up because I was infected by the Zeus trojan and I was broadcasting my bank info. So, I came here instead and ran the READ ME First procedure and I have my logs.

I believe I have what you have asked for. Let me know if I missed something because I usually do.

Thanks in advance for your help.

chaslang · Feb 6, 2017

There are no real issues showing in those logs although you should have allowed Malwarebytes to fix what it found. Also you forgot to attach the log from MGtools.exe but I doubt it will show any problems. You may have just gotten a popup trying to scare you when connected to so website. Has it happened again.

Stiina59 · Feb 7, 2017

I have not gotten the scary message since I changed the UAC and rebooted. That was when I closed the web browser out for the first time since getting it. I didn't think that MB found anything. Should I rerun it and let it correct any problems found? Rhetoric question, I will do that. I will also run the MG Tools and include that log in my next reply. Thank you for reassuring me that I didn't get a horrible infection or I did all the right things to stop it.

Stiina / Laura

Stiina59 · Feb 7, 2017

Here are the MB and MGTools logs.

chaslang · Feb 11, 2017

Your Malwarebytes log shows "No Action By User" Did you forget to let it cleanup the problems? Or did you save the log before cleaning?

Your logs are clean other than that minor junk found by Malwarebytes.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:

Refer to the instructions for your Windows version in this link: Disable And Enable System Restore

For Windows 8 and 8.1 system restore see this link: Win 8 System Restore - How to enable/disable

What we want you to do is to first disable System Restore to flush restore points some of which could be infected.

Then we want you to Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Stiina59 · Feb 12, 2017

On the MB, I quarantined all of the findings. That's odd that it showed that I did nothing--I thought I saved the log after the quarantine.

Will do the process above. Thank you for making sure I'm not hijacked.

Thanks again!
Stiina59 / Laura

chaslang · Feb 12, 2017

You're welcome. Surf safely!

Log in or Sign up

Zeus Trojan

Stiina59 Private First Class

Attached Files:

AdwCleaner[S4].txt

MBLog.txt

RKLog.txt

HitmanPro_20170206_1028.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Stiina59 Private First Class

Stiina59 Private First Class

Attached Files:

MBLog2.txt

MGlogs.zip

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Stiina59 Private First Class

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

Zeus Trojan

Stiina59 Private First Class

Attached Files:

AdwCleaner[S4].txt

MBLog.txt

RKLog.txt

HitmanPro_20170206_1028.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Stiina59 Private First Class

Stiina59 Private First Class

Attached Files:

MBLog2.txt

MGlogs.zip

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Stiina59 Private First Class

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches