Author Topic: Help With Malware not very technical  (Read 27155 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help With Malware not very technical
« Reply #15 on: February 19, 2010, 08:50:36 PM »
This should cure the IE and connection problem - let me know if you still get the not responding errors

Start OTS. Copy/Paste the information in the quotebox below into the pane where it says "Paste fix here" and then click the Run Fix button.

Code: [Select]
[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > ->
YN -> HKEY_USERS\.DEFAULT\: "ProxyEnable" -> 1
YN -> HKEY_USERS\.DEFAULT\: "ProxyServer" -> http=localhost:1361
< Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > ->
YN -> HKEY_USERS\S-1-5-18\: "ProxyEnable" -> 1
YN -> HKEY_USERS\S-1-5-18\: "ProxyServer" -> http=localhost:1361
< FireFox Settings [Prefs.js] > -> C:\Documents and Settings\Owner\Application Data\Mozilla\FireFox\Profiles\zbshxdyd.default\prefs.js
YN -> browser.search.selectedEngine -> "Search"
YN -> network.proxy.http_port -> 1039
YN -> network.proxy.type -> 1
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
YN -> "Locked" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
[Files/Folders - Created Within 30 Days]
NY ->  fftdbs -> C:\Documents and Settings\Owner\Local Settings\Application Data\fftdbs
[Custom Items]
[RESETHOSTS]
:end
[Empty Temp Folders]


The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here along with a new OTS log.

I will review the information when it comes back in.

Also let me know of any problems you encountered performing the steps above or any continuing problems you are still having with the computer.


JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #16 on: February 19, 2010, 09:23:47 PM »
I copied and pasted the fix, it restarted and the log file appeared. I tried the Internet Explorer again with no luck, I am running the OTS once again. I will post the results when it is finished. Thanks for the help/

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help With Malware not very technical
« Reply #17 on: February 19, 2010, 09:32:24 PM »
Hold on the OTS scan (save it for later) I will use a stronger tool

Download ComboFix from one of these locations:


Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal.  It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.




Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:




Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you.  Please include the C:\ComboFix.txt in your next reply.

JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #18 on: February 19, 2010, 11:07:05 PM »
Scanning right now, I will post the log file soon.

JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #19 on: February 20, 2010, 12:49:43 AM »
Here is the ComboFix Log. thanks for the help.

JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #20 on: February 20, 2010, 12:57:24 AM »
Internet Explorer still not working.  :'(

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help With Malware not very technical
« Reply #21 on: February 20, 2010, 04:58:02 PM »
Nice that removed a MBR infection plus lots of other rubbish - looks like we are now in the repair phase, which is generally the hardest part.  Let me know of any errors on completion of this fix 

 Download Fix IE Utility
  • Unzip the file to your desktop.
  • Close all open windows, especially Internet Explorer
  • Double click on Fix IE Utility to run it.
  • Click on the Run Utility button as shown in the image

    [indent][/indent]

  • Wait until the following message appears
[indent][/indent]

  • Then click on OK
  • Restart your machine to see if your Internet Explorer is now working again

JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #22 on: February 21, 2010, 06:22:25 AM »
Well, I ran the Fix IE Utility with no luck. I click on the IE icon and the hour glass comes up but seconds later it disappears. If I restart the computer a window that says IExplorer.exe not responding.

I appreciate all the help, this has been I nightmare and I am close to two weeks with the issue. I have been close to the point of trashing this computer out of frustation but I just do not have the resources to purchase another. Thanks again for your assistance with this issue.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help With Malware not very technical
« Reply #23 on: February 21, 2010, 01:14:19 PM »
Do you have a windows CD ?  As we could go for a repair

JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #24 on: February 21, 2010, 05:23:20 PM »
I am afraid I do not have a windows CD, the computer is like 6 years old and we have a moved a couple of times since I purchased it. Is there no fix without one? Thanks for your help essexboy.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help With Malware not very technical
« Reply #25 on: February 21, 2010, 05:59:13 PM »
OK let me rummage through my box of tricks - 

First we will reset your shell



Download fixshell.zip and extract the file to your desktop
Double click fixshell.com it may take a while and need a reboot

Let me know if IE responds now

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help With Malware not very technical
« Reply #26 on: February 21, 2010, 06:05:50 PM »
Additionally I have just uploaded a copy of Iexplore to the same site - it is file number 7
Download to your desktop and extract the file to C:\Program Files\Internet Explorer

JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #27 on: February 22, 2010, 06:58:37 PM »
I tried to unzip both files and this is what I got:

Error: Archive could not be loaded.
Verify archive location and password (if encrypted) and try the Unzip operation again.

Is there a step I missed?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help With Malware not very technical
« Reply #28 on: February 22, 2010, 08:01:22 PM »
I have uploaded naked copies now - same site, files numbered 5 and 7

JAGUARD77

  • Guest
Re: Help With Malware not very technical
« Reply #29 on: February 22, 2010, 08:37:09 PM »
Well, I downloaded both files. I first ran fixshell, the black screen came on and I let sit there and after about a minute in closed so I restarted the computer. I then copied and paste IExplorer.exe to program files>internet explorer as instructed and still no luck. Once in a while I get a window that Internet Explorer did not respond and to send it to microsoft but it appears with a red outline around the window which it never did before. I really appreciate all of your help.