Author Topic: please help !  (Read 25778 times)

0 Members and 1 Guest are viewing this topic.

carlwt2007

  • Guest
Re: please help !
« Reply #15 on: April 09, 2010, 11:58:27 PM »
ok here they are!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: please help !
« Reply #16 on: April 10, 2010, 12:09:38 AM »
OK I see it

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

Code: [Select]
:OTL
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [Qcekesi] C:\windows\asonoyivoqubub.DLL File not found
O20 - AppInit_DLLs: (aPWmNePKy.dll) - File not found

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN

Download ComboFix from one of these locations:


Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal.  It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.




Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:




Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you.  Please include the C:\ComboFix.txt in your next reply.

carlwt2007

  • Guest
Re: please help !
« Reply #17 on: April 10, 2010, 08:15:31 PM »
here is the new otl scan

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: please help !
« Reply #18 on: April 10, 2010, 08:33:11 PM »
That looks better - just the combofix log now

carlwt2007

  • Guest
Re: please help !
« Reply #19 on: April 10, 2010, 08:44:30 PM »
here is the combofix log

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: please help !
« Reply #20 on: April 10, 2010, 10:35:19 PM »
Now for the waifs and strays - on completion can you let me know what problems remain

Please download Malwarebytes' Anti-Malware from Here.

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

carlwt2007

  • Guest
Re: please help !
« Reply #21 on: April 10, 2010, 10:56:30 PM »
mbam log

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: please help !
« Reply #22 on: April 10, 2010, 10:57:11 PM »
What problems do you have now ?

carlwt2007

  • Guest
Re: please help !
« Reply #23 on: April 10, 2010, 10:57:35 PM »
this program dident find it the first time !

carlwt2007

  • Guest
Re: please help !
« Reply #24 on: April 10, 2010, 10:58:27 PM »
i wont know if it worked untill i run a avast scan

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: please help !
« Reply #25 on: April 10, 2010, 11:00:39 PM »
Run a scan then and let me know

carlwt2007

  • Guest
Re: please help !
« Reply #26 on: April 11, 2010, 12:41:42 AM »
ok scan is about 20% done and if had to move the same thing to the chest like 20 times!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: please help !
« Reply #27 on: April 11, 2010, 12:42:11 AM »
What is it that you are moving ?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: please help !
« Reply #28 on: April 11, 2010, 12:43:19 AM »
Also do you use flash drives ?

carlwt2007

  • Guest
Re: please help !
« Reply #29 on: April 11, 2010, 12:50:01 AM »
no i dont have a flash drive!

here is the log of the avast scan that i just ran!