[Resolved] [Resolved] Virtumonde lockdown

hello Please double-click Goored.exe on your Desktop to run it. Select 2. Fix Goored by typing 2 and pressing Enter. Make sure all instances of IE & Firefox are closed at this point. Type y at the prompt and press Enter again. A log will open, please post the contents of that log in your next reply (it can also be found on your desktop, called Goored.txt). mschroe919 I am going to be gone for the day will read your log late tonight Happy hoildays

GooredFix v1.6 by jpshortstuff Log created at 12:57 on 24/12/2008 running Option #2 Firefox version 3.0.5 (en-US) =====Goored Deletions===== [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions] "{76BD3F33-01D9-43B8-B140-E9C39622071B}"="C:\Documents and Settings\zarbuchan\Local Settings\Application Data\{76BD3F33-01D9-43B8-B140-E9C39622071B}" ->Backing up value… Done. ->Deleting value… Done. C:\Documents and Settings\zarbuchan\Local Settings\Application Data\{76BD3F33-01D9-43B8-B140-E9C39622071B} ->Backing up folder… Done. ->Emptying folder… Done. ->Deleting folder… Done. =====Dumping Registry Values===== [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.5\extensions] "Plugins"="C:\Program Files\Mozilla Firefox\plugins" [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.5\extensions] "Components"="C:\Program Files\Mozilla Firefox\components" [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions] "{3f963a5b-e555-4543-90e2-c3908898db71}"="C:\Program Files\AVG\AVG8\Firefox" (Folder Missing)

Happy Holidays, I will be back later. How is your Pc behaving now? mschroe919

Clicked around in Google a bit and didn't see redirects anymore. Beyond that, I haven't been seeing any peculiar behavior on my computer.

Hi

Well this time we realy got it.

you and your family have a great holiday.

Don't forget the stuiff I gave you to do last time we said yoiu were clean.
Also for sure:

[external image: Posted Image]

mschroe919

Did a little cleanup. I will be sure to report any other strange occurances here should any arise. Thank you for sticking with me on this matter.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.