How to get rid off Trojans/Adwares (Zusy.73969, Spy.Gen, Adware.Gen and GOffer.A)?

Windows Malware Removal Help & Support
13 Replies 4,230 Views
M

mrjones

New Member
Avira detects these viruses from the same locations almost every time (...AppData\Local\Temp\afgytdrp_458142(or other number)_setup.exe) and removes them into the quarantine . Still they keep coming back several times a day. It may happen right away when the computer is switched on and WLAN is connected or later whenever. Not normal, I think?

I tried to scan with aswMBR for 4 times, but the scan failed for some reason ("Avast! Antirootkit has stopped working etc...")

Some help would be appreciated, please...
 

Attachments

Hi, we need deeper scan



Please download zoek.zip or zoek.rar by smeenk (
Zoek_icon.png
) from here or here and save it to your Desktop.
Unpack the archive...
  • Close any open browsers
  • Temporarily disable your AntiVirus program. (If necessary)
    If you are unsure how to do this please read this or this Instruction.
  • Double click on zoek.exe to run the tool .
    Please wait while the tool does not start...
  • Copy the text present inside the code box below and paste it into the large window in the zoek tool:
Code: 
createsrpoint;
StandardSearch;
installer-list;
installedprogs;
uninstall-list;
  • Click on
    Run%20Script%20by%20zoek.png
    button.
    Please wait until a logreport will open (this can be after reboot)
  • Save notepad to your Desktop and attach here zoek-results.log
    Note: It will also create a log in the C:\ directory named "zoek-results.log"
 
> Re-run zoek with this script and attach here fresh zoek log results.


Code: 
emptyalltemp;
emptyclsid;
autoclean;
shortcutfix;
C:\PROGRA~2\YTDownloader;fs
C:\Program Files (x86)\YTDownloader;fs
emptyfolderscheck;delete
resethosts;
netsh int ip reset >> %temp%\log.txt;b 
ipconfig /flushdns >> %temp%\log.txt;b
 
No detections since saturday night. I'll get back to you if something happens. Can you briefly tell me what we just did?
Or if you have any other tips, please share... Thanks a lot!
 
mrjones said:
No detections since saturday night. I'll get back to you if something happens. Can you briefly tell me what we just did?
Or if you have any other tips, please share... Thanks a lot!
Click to expand...

We removed Junkware, and emptied Temp folder.

One more check, and we're done:

Download TDSSKiller and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Confirm "End user Licence Agreement" and "KSN Statement" dialog box by clicking on Accept button.
  • Press Start Scan
  • If Suspicious object is detected, the default action will be Skip, click on Continue.
  • If Malicious objects are found, select Cure.

Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt


Please post the contents of that log in your next reply.
 
Excellent, you are clean...

Only thing left is to remove used tools..


Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt

> I don't need DelFix log report.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top