Reply to thread

Message: <blockquote data-quote="Jack" data-source="post: 68555" data-attributes="member: 1">Hello  Shelly,Glad to see that everything is almost fine now... lets fixing the side effects of this nasty infection.Can you please perform the following scans:VERY IMPORTANT! Please run only one scan at the time!DO NOT START ALL THE SCAN AT ONCE!STEP 1: Run a HitmanPro scan<ol>    <li><>Download the latest official version of HitmanPro</>.<a href="http://www.surfright.nl/en/hitmanpro/" rel="nofollow" target="_blank"> <>HITMANPRO DOWNLOAD LINK</></a> (This link will open a download page in a new window from where you can download HitmanPro)</li>    <li>Start HitmanPro by <>double clicking on the previously downloaded file.</> and then following the prompts.<img src="http://malwaretips.com/images/removalguide/hpro4.png" alt="[Image: hitmanproscan4.png]" border="0" /></li>    <li>Once the scan is complete, a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click <>Next</> .<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/02/rsz_hpro5.png" alt="[Image: hitmanproscan5.png]" border="0" /></li>    <li>Click <>Activate free license</> to start the free 30 days trial and remove the malicious files.<img src="http://malwaretips.com/images/removalguide/hpro6.png" alt="[Image: hitmanproscan6.png]" border="0" /></li>    <li>HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.</ol>Add to your next  reply, any log that HitmanPro might generate.<hr />STEP 2: Run a scan with RogueKiller<ol>    <li>Please <>download the latest official version of </><>RogueKiller</>.<a href="http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe" rel="nofollow" target="_blank">ROGUEKILLER DOWNLOAD LINK</a> (This link will automatically download RogueKiller on your computer)</li>    <li><>Double click on RogueKiller.exe</> to start this utility and then <>wait for the Prescan to complete</>.This should take only a few seconds and then you can <>click the Scan button</> to perform a system scan.<img title="Click on the Start button to perform a system scan" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-1.png" alt="[Image: roguekiller-1.png]" width="600" height="450" border="0" /></li>    <li>After the scan has completed, <>press the Delete button</> to remove any malicious registry keys.<img title="Press Delete to remove the malicious registry keys" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-2.png" alt="[Image: roguekiller-2.png]" width="600" height="450" border="0" /></li>    <li>Next we will need to restore your shortcuts, <>so click on the ShortcutsFix button </>and allow the program to run.<img title="Click on the Start button to perform a system scan" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-3.png" alt="[Image: roguekiller-1.png]" width="600" height="450" border="0" /></li></ol>The report has been created on the desktop.In your next reply please post:    All RKreport.txt text files located on your desktop.<hr />STEP 3: Run a scan with ESET Online Scanner<ol>    <li>Download ESET Online Scanner utility.<><a title="External link" href="http://download.eset.com/special/eos/esetsmartinstaller_enu.exe" rel="nofollow">ESET Online Scanner Download Link</a></> (This link will automatically download ESET Online Scanner on your computer.)</li>    <li>Double click on the Eset installer program (esetsmartinstaller_enu.exe).</li>    <li>Check <>Yes, I accept the Terms of Use</></li>    <li>Click the <>Start</> button.</li>    <li>Check <>Scan archives</></li>    <li>Push the <>Start</> button.</li>    <li>ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.</li>    <li>When the scan completes, push <>List of found threats</></li>    <li>Push <>Export to Text file </> and save the file to your desktop using a unique name, such as <>ESET Scan</>. Include the contents of this report in your next reply.Note - when ESET doesn't find any threats, no report will be created.</li>    <li>Push the <>back</> button.</li>    <li>Push <>Finish</></li></ol><hr />STEP 4: Repair Background Intelligent Transfer Service 1. Click START2. Type “cmd” in the Search Box and then press Enter3. Right-click “cmd.exe"  and select  “Run as administrator”4. Click “Continue” on the “User Account Control” Window5. In the command prompt type the following command <code>sc create BITS binpath= “c:\windows\system32\svchost.exe -k netsvcs” start= delayed-auto</code>6.Restart your computer and check if the problem is solved.<hr />STEP 5: Run Temp File Cleaner by OldTimer<ol>    <li>You can download the TFC utility from the below link<a title="External link" href="http://oldtimer.geekstogo.com/TFC.exe" rel="nofollow external"><>TFC DOWNLOAD LINK</></a> (This link will automatically download Temp File Cleaner on your computer)</li>    <li>Please double-click <>TFC.exe</> to run it. (<>Note:</> If you are running on Vista or 7, right-click on the file and choose <>Run As Administrator</>).</li>    <li>It <>will close all programs</> when run, so make sure you have <>saved all your work</> before you begin.</li>    <li>Click the <>Start</> button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. <>Let it run uninterrupted to completion</>.</li>    <li>Once it's finished it should <>reboot your machine</>. If it does not, please <>manually reboot the machine</> yourself to ensure a complete clean.</li></ol><hr />STEP 6 : Run a scan with OTL by OldTimer:<ol><li>Download the OTL utility using the below link : <><a title="External link" href="http://oldtimer.geekstogo.com/OTL.exe" rel="nofollow external">OTL DOWNLOAD LINK</a></> (This link will automatically download OTL on your computer)</li><li>Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/OTL-logo.png" alt="" title="OTL-logo" width="106" height="118" class="alignnone size-full wp-image-3946" /></li><li>When the window appears, <>underneath Output</> at the top change it to <>Minimal Output</>.</li><li>Check the boxes beside <>LOP Check</> and <>Purity Check</>.</li><li>Click the<> Run Scan</> button.<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/OTL.png" alt="" title="OTL" width="658" height="584" class="alignnone size-full wp-image-3945" /></li><li>When the scan completes, it will open two notepad windows. <>OTL.Txt</> and <>Extras.Txt</>. These are saved in the same location as OTL.<>Please post this 2 logs in your first reply.</>.</li></ol>Note: If OTL.exe will not run, it may be blocked by malware. Try these alternate versions: <a title="External link" href="http://www.itxassociates.com/OT-Tools/OTL.scr" rel="nofollow external">OTL.scr</a>, or <a title="External link" href="http://oldtimer.geekstogo.com/OTL.com" rel="nofollow external">OTL.com</a>.<hr />What's next?Attach the following logs to your post (You can find <a href="http://malwaretips.com/Thread-How-to-use-the-attachment-system?pid=16072#pid16072" target="_blank">here</a> details on how to use the Attachment System): 1.HitmanPro logs2.RogueKiller logs3.ESET log4.OTL logs5.Let me know if you had any problems with the above instructions and also let me know how things are running now!</blockquote>

Verification

Top