TechSpot

Did the 8 part cleaning and posting the attachments

By edteach
Jun 21, 2009
  1. I ran the 8 part system and am posting the logs. Thanks for any help.
     
  2. mflynn

    mflynn TS Rookie Posts: 2,655

    No real issues noted what is the problem?

    Mike
     
  3. edteach

    edteach TS Rookie Topic Starter Posts: 42

    I had one of the fake virus protection malware. It would pop up consistantly. I found were it was running and disabled it then cleaned the system. But on another forum there was talk that small packets could regenerate the thing again. Thanks.
     
  4. mflynn

    mflynn TS Rookie Posts: 2,655

    Well it has not yet!

    So take a look with a special tool!

    Download ComboFix

    Get it here: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    Or here: http://subs.geekstogo.com/ComboFix.exe

    Double click combofix.exe follow the prompts.

    Install Recovery Console if connected to the Internet!

    When finished, it will open a log.
    Attach the log and a new HJT log in your next reply.

    Note: Do not click combofix's window while its running. That may cause it to stall.

    This should finish us up, but get me the logs!

    Mike
     
  5. edteach

    edteach TS Rookie Topic Starter Posts: 42

    I tried to down load from each site. when it is finished it reads "you can not rename combofix" then when I hit ok its gone. I don't think it installed. I diabled my virus scan. Is there another conflict?
     
  6. edteach

    edteach TS Rookie Topic Starter Posts: 42

    Instead of run, I will try to save it then open it.
     
  7. edteach

    edteach TS Rookie Topic Starter Posts: 42

    log

    That worked. Here is the log. Thanks a million for your help.
     
  8. mflynn

    mflynn TS Rookie Posts: 2,655

    Uh oh!

    Rename ComboFix to 1cfix and run it again, it did find some baddies and says it removed them but we need to confirm that.

    Post its log then do the below..

    D/L DrWeb Cureit: http://www.snapfiles.com/get/cureit.html
    Reboot to Safe Mode and run it. This will take a while but worth it!

    Mike
     
  9. edteach

    edteach TS Rookie Topic Starter Posts: 42

    New logs

    logs hijackthis and clean fix file
     
  10. mflynn

    mflynn TS Rookie Posts: 2,655

    OK looking good so far!

    So you are moving on to Cureit?

    Mike
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...