Followed 8 steps, please help

Status
Not open for further replies.
Hello everyone
I am not sure how i got this which is the worst part but i have it now
and i did all 8 steps
I have attached logs.

What do you guys think?

I really appreciate any help
 
Hello

Run malwarebyte again select Perform full scan, then click Scan.

When the scan is complete, click OK, then Show Results to view the results.

Be sure that everything is checked, and click Remove Selected.


Download HostsExpert: http://www.majorgeeks.com/Hoster_d4626.html

Choose one of the servers at Majorgeeks....save the file on your desktop

Unzip HostsXpert 4.2 - Hosts File Manager to a convenient folder such as C:\HostsXpert 4.2 - Hosts File Manager
Run HostsXpert 4.2 - Hosts File Manager from its new home
Click on "File Handling".
Click on "Restore MS Hosts File".
Click OK on the Confirmation box.
Click on "Make Read Only?"
Click the X to exit the program.
Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.


Please download Combofix:
http://subs.geekstogo.com/ComboFix.exe

And save to the desktop.

Open notepad and copy/paste the text in the quotebox below into it:
Name the file as CFScript
and Save it on the desktop

Killall::
Snapshot::

File::
c:\windows\system32\raguhiri.dll
c:\windows\system32\mogeviga.dll
C:\WINDOWS\system32\zinefowo.dll
c:\windows\system32\rotapote.dll
c:\windows\system32\kasivaga.dll
c:\windows\system32\kawenola.dll

http://img.photobucket.com/albums/v6...FScriptB-4.gif

Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe, and post back the resulting report, as attached file

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
 
The log you have posted is almost impossible to read ;)

Click on Format and Uncheck Word wrap, if checked in Notepad. Then please post combolog again.
 
Status
Not open for further replies.
Back