Reply to thread

Message: <blockquote data-quote="Jack" data-source="post: 64728" data-attributes="member: 1">Ok,can you please provide me the following log:STEP 1: Run a HitmanPro scan<ol>    <li><>Download the latest official version of HitmanPro</>.<a href="http://www.surfright.nl/en/hitmanpro/" rel="nofollow" target="_blank"> <>HITMANPRO DOWNLOAD LINK</></a> (This link will open a download page in a new window from where you can download HitmanPro)</li>    <li>Start HitmanPro by <>double clicking on the previously downloaded file.</> and then following the prompts.>>> IF you are experiencing problems while trying to start HitmanPro, you can use the Force Breach mode.To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (<a href="http://www.youtube.com/watch?v=m6eRWTv2STk" target="_blank">How to start HitmanPro in Force Breach mode – Video</a>)<img src="http://malwaretips.com/images/removalguide/hpro4.png" alt="[Image: hitmanproscan4.png]" border="0" /></li>    <li>Once the scan is complete, a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click <>Next</> .<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/02/rsz_hpro5.png" alt="[Image: hitmanproscan5.png]" border="0" /></li>    <li>Click <>Activate free license</> to start the free 30 days trial and remove the malicious files.<img src="http://malwaretips.com/images/removalguide/hpro6.png" alt="[Image: hitmanproscan6.png]" border="0" /></li>    <li>HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.</ol>Add to your next  reply, any log that HitmanPro might generate.<hr />2.Run a scan with Kaspersky TDSSKiller<>Read carefully and follow these steps.</><ol>    <li>Download <><a title="External link" href="http://support.kaspersky.com/downloads/utils/tdsskiller.exe" rel="external">TDSSKiller</a></> and save it to your Desktop.</li>    <li>Double-click on <>TDSSKiller.exe</> to run the application.<img src="http://img4.imageshack.us/img4/1907/tdss1.png" alt="Posted Image" /></li>    <li>Click <>Change parameters</><img src="http://img593.imageshack.us/img593/288/tdss2.png" alt="Posted Image" /></li>    <li>Check the boxes next to <>Verify Driver Digital Signature</> and <>Detect TDLFS file system</>, then click <>OK</><img src="http://img521.imageshack.us/img521/1456/tdss3.png" alt="Posted Image" /></li>    <li>Click on the <>Start Scan</> button to begin the scan and wait for it to finish.<>NOTE:</> Do not use the computer during the scan!</li>    <li>During the scan it will look similar to the image below:<img src="http://img6.imageshack.us/img6/9136/tdss4.jpg" alt="Posted Image" /></li>    <li>When it finishes, you will either see a report that no threats were found like below:<img src="http://img696.imageshack.us/img696/9898/tdss5.jpg" alt="Posted Image" />If no threats are found at this point, just click the <>Report</> selection on the top right of the form to generate a log. A log file report will pop which you can just close since the report file is already saved.</li>    <li>If any infection or suspected items are found, you will see a window similar to below:<img src="http://img854.imageshack.us/img854/905/tdss7.jpg" alt="Posted Image" /><ul>    <li>If you have files that are shown to fail signature check do not take any action on these. Make sure you select <>Skip</>. I will tell you what to do with these later. They may not be issues at all.</li>    <li>If Suspicious objects are detected, the default action will be Skip. Leave the default set to Skip.</li>    <li>If Malicious objects are detected, they will show in the Scan results. TDSSKiller automatically selects an action (Cure or Delete) for malicious objects.Make sure that <>Cure</> is selected. <>Important!</> - If Cure is not available, please choose <>Skip</> instead. Do not choose Delete unless instructed to do so.</li></ul></li>    <li>Click <>Continue</> to apply selected actions.</li>    <li>A reboot may be required to complete disinfection. A window like the below will appear:<img src="http://img828.imageshack.us/img828/4812/tdss6.jpg" alt="Posted Image" />Reboot immediately if TDSSKiller states that one is needed.</li>    <li>Whether an infection is found or not, a log file should have already been created on your C: drive (or whatever drive you boot from) in the root folder named something like <>TDSSKiller.2.1.1_27.12.2009_14.17.04_log.txt</> which is based on the program version # and date and time run.</li>    <li>Attach this log to your next reply.</li></ol><hr /><>Step 3: Run a scan with OTL by OldTimer:</><ol><li>Download the OTL utility using the below link : <><a title="External link" href="http://oldtimer.geekstogo.com/OTL.exe" rel="nofollow external">OTL DOWNLOAD LINK</a> (This link will automatically download OTL on your computer)</></li><li>Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/OTL-logo.png" alt="" title="OTL-logo" width="106" height="118" class="alignnone size-full wp-image-3946" /></li><li>When the window appears, <>underneath Output</> at the top change it to <>Minimal Output</>.</li><li>Check the boxes beside <>LOP Check</> and <>Purity Check</>.</li><li>Click the<> Run Scan</> button.<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/OTL.png" alt="" title="OTL" width="658" height="584" class="alignnone size-full wp-image-3945" /></li><li>When the scan completes, it will open two notepad windows. <>OTL.Txt</> and <>Extras.Txt</>. These are saved in the same location as OTL.<>Please post this 2 logs in your first reply.</>.</li></ol>Note: If OTL.exe will not run, it may be blocked by malware. Try these alternate versions: <a title="External link" href="http://www.itxassociates.com/OT-Tools/OTL.scr" rel="nofollow external">OTL.scr</a>, or <a title="External link" href="http://oldtimer.geekstogo.com/OTL.com" rel="nofollow external">OTL.com</a>.<hr />What's next?Please post in your next reply:1.HitmanPro log2.Kaspersky TDSSKiller log3. OTL Logs4. Let me know if you had any problems with the above instructions and also <>let me know how things are running now!</></blockquote>

Verification

Top