« previous next »
Pages: 1 2 [3] 4 5 ... 7   Go Down

Author Topic: I have problem with win32:malware-gen  (Read 55388 times)

0 Members and 1 Guest are viewing this topic.

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #30 on: March 08, 2012, 07:02:58 PM »
Hi, 

Sorry about the problems you are having with OTL.
----------

Download Combofix from either of the links below, and save it to your desktop. 
Link 1
Link 2

**Note:  It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

--------------------------------------------------------------------

Right-Click and Run as Administrator on ComboFix.exe & follow the prompts.
    When finished, it will produce a report for you. 
  • Please post the C:\ComboFix.txt for further review.
Logged

QNtas

  • Guest
Re: I have problem with win32:malware-gen
« Reply #31 on: March 11, 2012, 01:53:45 PM »
that file combofix.txt use 2.45MB space on disc and i can post jus 190KB
Logged

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #32 on: March 11, 2012, 09:48:16 PM »
Hi QNtas,

Please upload the file here >> http://www.mediafire.com/ and then post the link that is created.  I can then download the file from there.  :)
Logged

QNtas

  • Guest
Re: I have problem with win32:malware-gen
« Reply #33 on: March 11, 2012, 10:15:28 PM »
Logged

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #34 on: March 11, 2012, 10:29:04 PM »
Hi,

Good job getting that uploaded.  Looks like ComboFix removed quite a bit.  :)
Logged

QNtas

  • Guest
Re: I have problem with win32:malware-gen
« Reply #35 on: March 11, 2012, 10:40:05 PM »
yes but there are more i want remove them all :) thx for helping man
Logged

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #36 on: March 11, 2012, 10:40:14 PM »
Hi QNtas,

  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
Code: [Select]
ClearJavaCache::

DDS::
uStart Page = hxxp://home.sweetim.com
mStart Page = hxxp://home.sweetim.com
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"=-
[-HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[-HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
[-HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[-HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[-HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[-HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SweetIM"=-
  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.



  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
----------
Logged

QNtas

  • Guest
Re: I have problem with win32:malware-gen
« Reply #37 on: March 12, 2012, 06:48:07 AM »
hi, that was fast scan :)
Logged

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #38 on: March 12, 2012, 01:05:54 PM »
Hi QNtas,

Looking better.  :)

Malwarebytes

I see that you have Malwarebytes already on your computer.  Please open Malwarebytes, update it and then run a Quick Scan.  Save the log that is created for your next reply.
----------

ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

  • Please go here then click on:
  • Quote
    Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
  • Select the option YES, I accept the Terms of Use then click on:
  • When prompted allow the Add-On/Active X to install.
  • Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
  • Now click on Advanced Settings and select the following:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Now click on:
  • The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
  • When completed the Online Scan will begin automatically.
  • Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
  • When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
  • Now click on:
  • Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
  • Copy and paste that log as a reply to this topic.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!
----------

In your next reply please post the logs made by Malwarebytes and ESET online scanner.  :)
Logged

QNtas

  • Guest
Re: I have problem with win32:malware-gen
« Reply #39 on: March 13, 2012, 05:10:05 PM »
Logged

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #40 on: March 13, 2012, 08:51:11 PM »
Hi,

We will have to hit this twice as there are a lot of entries that need to go.  I notice that you had run ESET but I did not get a log for Malwarebytes.  Please run that and post that log as well.
----------
  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
Code: [Select]
File::
D:\autocad2012\acad2012m_x64.iso
D:\autocad2012\Crack\xf-a2012-32bits.rar
D:\autocad2012\Crack\xf-a2012-64bits.rar
D:\autocad2012\Crack\xf-adesk2012x64.exe
  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.



  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
----------
Logged

QNtas

  • Guest
Re: I have problem with win32:malware-gen
« Reply #41 on: March 13, 2012, 09:26:24 PM »
hi, here it is :)
Logged

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #42 on: March 13, 2012, 09:42:59 PM »
Hi,

Download TFC to your desktop
  • Close any open windows.
  • Right-click and Run as Administrator the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't,  manually reboot to ensure a complete clean
--------------

Once that has completed run a new scan with ESET and post that to your next reply.  :)
Logged

QNtas

  • Guest
Re: I have problem with win32:malware-gen
« Reply #43 on: March 14, 2012, 02:07:14 PM »
Logged

jeffce

  • Guest
Re: I have problem with win32:malware-gen
« Reply #44 on: March 14, 2012, 03:24:58 PM »
Hi QNtas,

Please update Malwarebytes, run a Quick Scan and post that log into your next reply.  :)
Logged
Pages: 1 2 [3] 4 5 ... 7   Go Up
« previous next »