Reply to thread

Message: <blockquote data-quote="Jack" data-source="post: 64949" data-attributes="member: 1">Glad to see that we've manage to remove that nasty infection... 1.Cookies aren't dangerous and don't pose any kind of danger for your machine so it's ok.2.Your were the victim of the TDL-4 (TDSS or Alureon) rootkit,you can find more details here : http://searchsecurity.techtarget.com/definition/TDL-4-TDSS-or-Alureon3 and 4.No,you need to get rid of McAfee as it's a very poor security product.Avast Antivirus 7 Free is a very good and decent antivirus however I recommend that you start a thread in our <a href="http://malwaretips.com/Forum-Security-Configuration-Wizard" target="_blank">Security Configuration Wizar</a> Forum so we can help you build a decent security configurationNext,please run the below steps:STEP 1: Run a scan with RogueKiller<ol>    <li>Please <>download the latest official version of </><>RogueKiller</>.<a href="http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe" rel="nofollow" target="_blank">RogueKiller Download Link</a> (This link will automatically download RogueKiller on your computer)</li>    <li><>Double click on RogueKiller.exe</> to start this utility and then <>wait for the Prescan to complete</>.This should take only a few seconds and then you can <>click the Start button</> to perform a system scan.<img title="Click on the Start button to perform a system scan" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-1.png" alt="[Image: roguekiller-1.png]" width="600" height="450" border="0" /></li>    <li>After the scan has completed, <>press the Delete button</> to remove any malicious registry keys.<img title="Press Delete to remove the malicious registry keys" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-2.png" alt="[Image: roguekiller-2.png]" width="600" height="450" border="0" /></li>    <li>Next we will need to restore your shortcuts, <>so click on the ShortcutsFix button </>and allow the program to run.<img title="Click on the Start button to perform a system scan" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-3.png" alt="[Image: roguekiller-1.png]" width="600" height="450" border="0" /></li></ol>The report has been created on the desktop.In your next reply please post:    All RKreport.txt text files located on your desktop.<hr />STEP 2: Run a aswMBR scan:<ol> <li data-xf-list-type="ol">Download aswmbr.exe from the below link: <a href="http://public.avast.com/~gmerek/aswMBR.exe" target="_blank">aswMBR DOWNLOAD LINK </a>(This link will automatically download aswMBR on your computer)</li> <li data-xf-list-type="ol">Double click the aswMBR.exe to run it. </li> <li data-xf-list-type="ol">Click the [Scan] button to start scan <img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/avast-mbr-1.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /> </li> <li data-xf-list-type="ol">On completion of the scan click [Save log], save it to your desktop and post in your next reply. <img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/avast-mbr-2.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /></li> </ol><hr />STEP 3: Run a scan with Kaspersky Virus Removal ToolClick <a title="External link" href="http://www.kaspersky.com/antivirus-removal-tool?form=1" rel="nofollow external" rel="nofollow"><>here</></a> to download the Kaspersky Virus Removal Tool.<ol>    <li>Save it to your desktop.</li>    <li>Double click the setup file to run it.</li>    <li>Follow the onscreen prompts until it is installed</li>    <li>Click the Options button (the 'Gear' icon), then make sure only the following are ticked:<ul>    <li>System Memory</li>    <li>Hidden startup objects</li>    <li>Disk boot sectors</li>    <li>Local Disk (C: )</li>    <li>Also any other drives (Removable that you may have)</li></ul></li>    <li>Then click on <>Actions</> on the left hand side</li>    <li>Click <>Select Action</>, then make sure both <>Disinfect</> and <>Delete if disinfection fails</> are ticked</li>    <li>Click on <>Automatic Scan</></li>    <li>Now click the <>Start Scanning</> button, to run the scan</li>    <li>After the scan is complete, click the reports button ('Paper icon', next to the 'Gear' icon) on the right hand side</li>    <li>Click <>Detected threats</> on the left</li>    <li>Now click the <>Save</> button, and save it as <>kaslog.txt</> to your <>Desktop</></li>    <li>Please attach kaslog.txt in your next reply.</li></ol><hr />STEP 4: Run a scan with ESET Online Scanner<ol>    <li>Download ESET Online Scanner utility.<><a title="External link" href="http://download.eset.com/special/eos/esetsmartinstaller_enu.exe" rel="nofollow">ESET Online Scanner Download Link</a></> (This link will automatically download ESET Online Scanner on your computer.)</li>    <li>Double click on the Eset installer program (esetsmartinstaller_enu.exe).</li>    <li>Check <>Yes, I accept the Terms of Use</></li>    <li>Click the <>Start</> button.</li>    <li>Check <>Scan archives</></li>    <li>Push the <>Start</> button.</li>    <li>ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.</li>    <li>When the scan completes, push <>List of found threats</></li>    <li>Push <>Export to Text file </> and save the file to your desktop using a unique name, such as <>ESET Scan</>. Include the contents of this report in your next reply.Note - when ESET doesn't find any threats, no report will be created.</li>    <li>Push the <>back</> button.</li>    <li>Push <>Finish</></li></ol><hr />STEP 5: Run Windows Repair All in One<ol><li>Download the Windows Repair All in One utility from the below link.<a title="External link" href="http://www.tweaking.com/content/page/windows_repair_all_in_one.html" rel="nofollow"><>WINDOWS REPAIR ALL IN ONE DOWNLOAD LINK</></a> (This link will open a download page in a new window from where you can download Windows Repair All in One Portable version)</li>    <li>Double-click <>tweaking.com_windows_repair_aio.zip</> and extract the <>Tweaking.com - Windows Repair</> folder to your desktop.</li>    <li>Now open this folder and double-click <>Repair_Windows.exe</>.</li>    <li>Click the <>Start Repairs</> tab on the far right.</li>    <li>Click the <>Start</> button (bottom right)Note: When asked if you would like to create a restore point. It is recommended just in-case something does not go as planned.</li>    <li>Click <>Unselect All</></li>    <li>Put a checkmark in the following items:<ul>    <li>Repair Hosts File</li>    <li>Remove Temp Files</li>    <li>Remove Policies Set By Infections</li></ul>Note: Leave everything else unchecked</li>    <li>Put a checkmark in <>Restart System When Finished</></li>    <li>Now click the <>Start</> button (bottom right)</li></ol><hr />STEP 3:Run Malwarebytes StartupLite to remove unnecessary items at Windows startupYou have a lot of files loading at startup....lets make your computer a little faster..<ol><li>Download StartUpLite and save it to a convenient location.<a href="http://downloads.malwarebytes.org/file/startuplite"><>MALWAREBYTES STARTUPLITE DOWNLOAD LINK</></a> (This link will open a new webpage from where you can download Malwarebytes StartUpLite)<li>Double click StartUpLite.exe and then select all options you would like executed and select continue.</li></ol><hr />What's next?Attach the following logs to your post (You can find <a href="http://malwaretips.com/Thread-How-to-use-the-attachment-system?pid=16072#pid16072" target="_blank">here</a> details on how to use the Attachment System): 1.RogueKiller logs2.ESET log3.Kaspersky log4.aswMBR log5.Let me know if you had any problems with the above instructions and also let me know how things are running now!</blockquote>

Verification

Top