Author Topic: Re-occuring Infection  (Read 29931 times)

0 Members and 1 Guest are viewing this topic.

bulls1441

  • Guest
Re: Re-occuring Infection
« Reply #60 on: October 24, 2013, 05:33:55 AM »
Attached are the results of both scans

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Re-occuring Infection
« Reply #61 on: October 24, 2013, 03:07:16 PM »
Download the latest version of TDSSKiller from here and save it to your Desktop.
 
 
  • Doubleclick on TDSSKiller.exe to run the application


  • Then click on Change parameters.
     

     
  • Check the boxes beside Verify Driver Digital Signature, Detect TDLFS file system  and Use KSN to scan objects , then click OK.
     
  • Click the Start Scan button.
     
     
  • If a suspicious object is detected, the default action will be Skip, click on Continue.
     

     
  • If malicious objects are found, they will show in the Scan results and offer three (3) options.
  • Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.

  • Get the report by selecting Reports

 
  • Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
Please copy and paste its contents on your next reply.

bulls1441

  • Guest
Re: Re-occuring Infection
« Reply #62 on: October 24, 2013, 07:00:21 PM »
I could not fit the entire text in this reply, so I'm attaching it as a .txt file. Rebooting now

bulls1441

  • Guest
Re: Re-occuring Infection
« Reply #63 on: October 24, 2013, 07:18:52 PM »
My computer blue screened and crashed before I got the chance to reboot it. Should I reboot it again just in case?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Re-occuring Infection
« Reply #64 on: October 24, 2013, 08:37:34 PM »
Yes reboot again please and then re-run TDSSKiller to ensure that the bad boy has gone..  No need for the log just a yes or no will do :)

bulls1441

  • Guest
Re: Re-occuring Infection
« Reply #65 on: October 25, 2013, 06:31:29 AM »
Alright, ran it once more and found no more threats. Reboot went fine.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Re-occuring Infection
« Reply #66 on: October 25, 2013, 02:56:40 PM »
Run OTL and press the cleanup button to remove it :)

bulls1441

  • Guest
Re: Re-occuring Infection
« Reply #67 on: October 25, 2013, 11:02:21 PM »
Ok, any more steps after that?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Re-occuring Infection
« Reply #68 on: October 25, 2013, 11:27:32 PM »
Nope that's it, the system looked clean in all other respects

bulls1441

  • Guest
Re: Re-occuring Infection
« Reply #69 on: October 25, 2013, 11:53:41 PM »
Excellent! Thank you so much! Hopefully nothing else comes up, but if it does, I know where to go. Do I need to keep any of those 3 programs?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Re-occuring Infection
« Reply #70 on: October 26, 2013, 01:02:31 PM »
No just delete TDSSKiller and AswMBR

theoverfiendfua

  • Guest
Re: Re-occuring Infection
« Reply #71 on: December 11, 2013, 01:49:23 AM »
I seem to be having the same problems and in addition to mclarenz getting an alert for
hXXp:xerobotan.com/aa
and  random cmd ones

not sure If I am getting audio ads as my sound doesn't work.

Essexboy are you still running around here to help me out?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37614
  • Not a avast user
Re: Re-occuring Infection
« Reply #72 on: December 11, 2013, 02:11:29 AM »
I seem to be having the same problems and in addition to mclarenz getting an alert for
hXXp:xerobotan.com/aa
and  random cmd ones

not sure If I am getting audio ads as my sound doesn't work.

Essexboy are you still running around here to help me out?
start your own topic, and follow guide.   http://forum.avast.com/index.php?topic=53253.0
then essexboy will help you tomorrow