Malware Removal | Forum profile

There was an issue with kaspersky freezing when i tried to save the logfile, but a second scan worked fine. HJT: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:38:04, on 11/17/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\...

Quote: Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections. If you think you have similar problems, please post a log in the HJT forum and wait for help. Hello and ...

Hi Please download Malwarebytes' Anti-Malware to your desktop. Double-click mbam-setup.exe and follow the prompts to install the program. At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware , then click Finish . If an update is found, it will download and install the latest version. Once the program ...

Hi Please download Malwarebytes' Anti-Malware to your desktop. Double-click mbam-setup.exe and follow the prompts to install the program. At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware , then click Finish . If an update is found, it will download and install the latest version. Once the program ...

I let SB run to completion which took about 4 hours. It did not report any threats BUT I did observe that it scanned Virtumonde and Virtumonde.dll. Should not those have been recorded as threats and listed for removal? Eric

yes i checked the box no i didn't reboot will do so now

Hi Skip over recovery console part __________________ Microsoft MVP Consumer Security 2008 MalWare Removal University ASAP & UNITE member since 2006 I don't help with logs thru PM. If you have problems create a thread in the forum, please.

Installed AntiVir here is new HJT log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:57:46 AM, on 11/17/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18241) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe...

Quote: Originally Posted by crashingdell didn't seem to work. Here's the log. no time to try IE again now, I can try when I get home from work. Let me know how you get on __________________ ...

Thanks for returning your information. BitTorrent <<< uninstall this and any other p2p programs on this computer, see this: http://forums.spybot.info/showthread.php?t=282 Quote: If your helper detects the presence of such programs on your computer he/she will ask you to remove them. Help will...

Hi Yes, I'm still here Open notepad and copy/paste the text in the quotebox below into it: Code: File:: c:\documents and settings\ESPRIMO\Application Data\install.exe c:\windows\system32\ws59179.dll c:\windows\system32\mws59179.dll c:\documents and settings\ESPRIMO\Application Data\shellex.dll c:\documents and settings\ESPRIMO\Application Data\srcss.exe Folder...

Quote: Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections. If you think you have similar problems, please post a log in the HJT forum and wait for help. Hello and ...

Thanks fore returning the MBAM log and it did remove some junk but you are still infected. I strongly suggest you stay offline when not working of these problems until we kill all of the junk. It is likely you have a rootkit infection: http://en.wikipedia.org/wiki/Rootkit which is blocking the tools we are trying to use. I would like to try to run Smitfraudfix again, make sure you ...

if i remove zonealarm spyblocker, would zonealarm would be completely removed?

Hi Yes ( a copy of this will be saved to C:\haxlog.txt)

Good Morning, Drag your copy of Combofix to the trash and download a fresh copy as its being updated on a regular basis. Download Combofix from any of the links below, and save it to your desktop. <-- Important Link 1 Link 2 Link 3 Open Notepad Go to Start> All Programs> Assessories> Notepad ( this will only work with Notepad ) and copy all the ...

Hi Please disable TeaTimer and run resetTeaTimer batch file as instructed or we won't get any further here. TeaTimer prevents fixes from fully working. After that make sure your antivirus program is disabled and run ComboFix again. Post back its report & a fresh hjt log.

Hi Navigate into C:\Program Files\Trend Micro\ HijackThis folder and rename HijackThis.exe file -> whatever.exe. Post a fresh hjt log after renaming is done

Hey bear with me I'm a first timer. Below is Hijack Log. I'm getting firewall bypass along with virtumonde. Spybot seems to remove but after rebooting viruse's come back. Any help would be fine. Thanks Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 4:54:32 PM, on 11/11/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode...

Hello and Welcome to forums! My name is Bio-Hazard and I will be helping you to remove any infection(s) that you may have. Please observe these rules while we work: I will be working on your Malware issues this may or may not solve other issues you have with your machine. The fixes are specific to your problem and should only be used for this issue on this machine. I f you...