[Closed] Your System Is Infected
#1
Posted 21 September 2009 - 09:22 PM
Register to Remove
#2
Posted 22 September 2009 - 05:36 PM
Hi, welcome to the WTT Forums. My username is Raktor, and I would be glad to help you with your malware issues. I'd be grateful if you would note the following:
- Absence of symptoms does not always mean the computer is clean
- Please do not run any scans or fixes without my direction.
- Finally, stay with this topic until I give you the final 'All clear' post.
Do you have access to another computer where you can put our tools onto a USB key or burn them onto a CD?
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation.
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.
#3
Posted 22 September 2009 - 07:44 PM
#4
Posted 22 September 2009 - 07:50 PM
Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).
2) DDS
Please download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
- When done, DDS will open two (2) logs:
- DDS.txt
- Attach.txt
- Save both reports to your desktop.
3) RR
Please download RootRepeal.zip.
Save it to your Desktop. Alternate download links here or here.
Please print these instructions, you will not have an Internet connection!
If you have a 3rd party "unzipping" program...use it to open the zipped file...then skip to Step 5. Otherwise...
- Right click on RootRepeal.zip and select "Extract All"....
- Click Next on the "Welcome to the Compressed (zipped) Folders Extraction Wizard."
- Click on the Browse...button, then click on Desktop, then click OK.
- Once done, check (tick) the Show extracted files box and click Finish.
- Before running RootRepeal:
- Disconnect from the Internet as your system will be unprotected while using this tool.
Close all programs and temporarily disable your anti-virus, Firewall and any anti-malware real-time protection before performing a scan.
- Disconnect from the Internet as your system will be unprotected while using this tool.
- Open the RootRepeal folder and double-click on RootRepeal.exe to launch it.
- When the program opens, click the Report tab at the bottom, then click the Scan button.
- In the Select Scan, dialog which asks What do you want to include in the scan?, check ALL the boxes.
- Click OK.
- In the Select Drives, dialog Please select drives to scan: select all drives showing, then click OK.
The scan can take some time to finish. Do not use the computer while the scan is running.
When the scan has completed, a list of files will be generated in the RootRepeal window. - Click on the Save Report button and save it as "rootrepeal.txt" to your desktop.
- Close and exit RootRepeal
- Double-click on the file rootrepeal.txt... Notepad will open... copy/paste the file contents in your next reply.
Make sure to enable your anti-virus, Firewall and any other security programs you disabled.
Note: If RootRepeal cannot complete a scan and results in a crash report, try repeating the scan in "safe mode".
4) What You Will Need To Post:
- DDS logs
- RR log
- exeHelper log
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation.
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.
#5
Posted 23 September 2009 - 04:35 PM
#6
Posted 30 September 2009 - 12:25 AM
Graduate from the WTT Malware Classroom
If you feel I have helped you, please consider a donation.
Topics will be closed after three days if there is no response.
Please do not PM me for malware removal assistance.
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users