These Trojan Horse Twins called 80000032.@ and 80000064.@ are destrying my life

[frankocean89]

Sorry it took so long :/
Combofix took about an hour to scan whn I thought it will only last for 10 min. This makes me fear for the health of my laptop
I had issue disabling Avast despite doing exactly what was advised in teh links you posted. I right-clicked on it and disabled it for an hour but Combofix kept on saying that it wasnt disabled

[magna86]

All looks clean. How's your computer running now?

[frankocean89]

GREAT
GREAT
GREAT!!!
Thanks so much!! I could hug you right now. I was so distressed earlier toady you saved me! Thanks 

[Pondus]

magna is probably in bed now...check back tomorrow and he will remove the tools used   

[frankocean89]

magna is probably in bed now...check back tomorrow and he will remove the tools used   

Good morning everyone.
Which tool do i have to remove and how ?

[magna86]

Now that your machine is clean and safe, I suggest you to change all your important passwords on your computer, from your bank accounts and stuff the like ...

First we need to remove FRST Quarantine.





1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Code: [Select]

DeleteQuarantine:
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt).
Note: If the tool warned you about the outdated version please download and run the updated version.






--------- next ---------






It is necessary to uninstall ComboFix :

• Click Start (or ) then Run.
  
  
  On Windows7 or Vista you may use Start Search field if Run is not available.
  
  
• In the line of text type in (Copy) the following:

Code: [Select]

ComboFix /Uninstall

Note that there is a space between " ComboFix " and " /Uninstall " .

• then click OK (or press Enter ).

Wait for the uninstall process is complete.






--------- next ---------




Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;

• Remove disinfection tools
• Create registry backup
• Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt


> I don't need DelFix log report.



------------------------------------------------------------------


I recommend you to use MCShield if you will.
You may download MCShield from one of the following links:

MyCity -  Official download link
Softpedija - Mirror download link

It will prevent infection by computer via USB flash drive, mobile phone or any other memory card.
And not only will prevent infection, but it will immediately clean flash drive, memory card or external HDD.




Be safe.