Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Need help removing this virus.
Message
<blockquote data-quote="Fiery" data-source="post: 89602" data-attributes="member: 9"><p>Ok good, next, open Roguekiller again and click the DNS tab, make sure these 2 entries are selected</p><p></p><p>[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{0B7C6A63-F272-49C7-9582-E9E210BD1530} : NameServer (8.8.8.8,8.8.8.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1) -> FOUND</p><p>[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{0B7C6A63-F272-49C7-9582-E9E210BD1530} : NameServer (8.8.8.8,8.8.8.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1) -> FOUND</p><p></p><p>then click on the DNS Fix button. </p><p></p><p>Download TDSSKiller (.exe one) from <a href="http://www.bleepingcomputer.com/download/tdsskiller/" target="_blank"> here</a> and save it to your Desktop. <ul> <li data-xf-list-type="ul">Doubleclick on TDSSKiller.exe to run the application, then on <strong>Start Scan.</strong></li> <li data-xf-list-type="ul">If an infected file is detected, the default action will be<strong> Cure</strong>, click on Continue.</li> <li data-xf-list-type="ul">If a suspicious file is detected, the default action will be <strong>Skip</strong>, click on Continue.</li> <li data-xf-list-type="ul">It may ask you to reboot the computer to complete the process. Click on <strong>Reboot Now</strong>.</li> <li data-xf-list-type="ul">If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.</li> <li data-xf-list-type="ul">If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.</li> </ul><p></p><p>Then, Download Malwarebytes' Anti-Malware(<a href="http://www.malwarebytes.org/products/malwarebytes_free/" target="_blank"><span style="color: blue"><strong>download link</strong></span></a>) to your desktop <img src="http://cache.filehippo.com/img/ex/1208__malwarebytes.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /></p><ul> <li data-xf-list-type="ul">Double-click <strong>mbam-setup.exe</strong> and follow the prompts to install the program.</li> <li data-xf-list-type="ul">At the end, be sure a checkmark is placed next to<ul> <li data-xf-list-type="ul"> <strong>Update Malwarebytes' Anti-Malware</strong></li> <li data-xf-list-type="ul"> and <strong>Launch Malwarebytes' Anti-Malware</strong></li> </ul></li> <li data-xf-list-type="ul"> then click <strong>Finish</strong>.</li> <li data-xf-list-type="ul">Malwarebytes Anti-Malware will now start and you'll be prompted to start a trial period , please select '<<strong>>Decline</<strong>>' <br /> <img title="Decline trial period in Malwarebytes Anti-Malware" src="http://malwaretips.com/images/removalguide/mbam3.PNG" alt="[Image: Decline Malwarebytes trial]" width="432" height="165" border="0" /><br /> [*]If an update is found, it will download and install the latest version.<br /> <br /> <img src="http://img5.imageshack.us/img5/2738/42456544.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" /><br /> <br /> <br /> [*]Once the program has loaded, select <strong>Perform quick scan</strong>, then click <strong>Scan</strong>.<br /> [*]When the scan is complete, click <strong>OK</strong>, then <strong>Show Results</strong> to view the results.<br /> <br /> <br /> <img src="http://img651.imageshack.us/img651/733/55713761.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" /><br /> <br /> <br /> [*]Be sure that everything is Checked (ticked) and click on <strong>Remove Selected</strong>.<br /> [*]Reboot your computer if prompted.</strong></strong></li> </ul><p><strong><strong></strong></strong></p><p><strong><strong></strong></strong></p><p><strong><strong>Lastly, remove any left over malicious files with HitmanPro</strong></strong></p><p><strong><strong><ol></strong></strong></p><p><strong><strong> <li>This step can be performed in <<strong>>Normal Mode</<strong>> ,so please <<strong>>download the latest official version of HitmanPro</<strong>>.</strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><a href="http://malwaretips.com/download-hitmanpro" rel="nofollow" target="_blank"> <<strong>>HITMANPRO DOWNLOAD LINK</<strong>></a> <em>(This link will open a download page in a new window from where you can download HitmanPro)</em></li></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong> <li><<strong>>Double click on the previously downloaded file</<strong>> to start the HitmanPro installation.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><img title="HitmanPro Installer" src="http://malwaretips.com/images/removalguide/hpro1.png" alt="[Image: hitmanpro-icon.png]" width="54" height="58" border="0" /></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><<strong>>IF</<strong>> you are experiencing problems while trying to starting HitmanPro, you can use the "<em>Force Breach</em>" mode.To start this program in Force Breach mode,<<strong>> hold down the left CTRL-key when you start HitmanPro</<strong>> and all non-essential processes are terminated, including the malware process. (<a href="http://www.youtube.com/watch?feature=player_embedded&v=m6eRWTv2STk" target="_blank">How to start HitmanPro in Force Breach mode - Video</a>)</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong> <li>Click on <<strong>>Next </<strong>>to install HitmanPro on your system.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><img title="HitmanPro installation process" src="http://malwaretips.com/images/removalguide/hpro2.png" alt="[Image: installing-hitmanpro.png]" width="532" height="421" border="0" /></li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong> <li>The setup screen is displayed, from which you can decide whether you wish to install HitmanPro on your machine or just perform a one-time scan, select a option then click on <<strong>>Next </<strong>>to start a system scan.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><img title="HitmanPro setup options" src="http://malwaretips.com/images/removalguide/hpro3.png" alt="[Image: hitmanpro-setup-options.png]" width="532" height="421" border="0" /></li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong> <li>HitmanPro will start scanning your system for malicious files. Depending on the the size of your hard drive, and the performance of your computer, this step will take several minutes.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><img title="HitmanPro scanning for Win 8 Security System" src="http://malwaretips.com/images/removalguide/hpro4.png" alt="[Image: hitmanpro-scanning.png]" width="532" height="421" border="0" /></li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong> <li>Once the scan is complete,a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click <<strong>>Next</<strong>>.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><img title="HitmanPro Win 8 Security System scan results" src="http://malwaretips.com/images/removalguide/hpro5.png" alt="[Image: hitmanpro-scan-results.png]" width="532" height="421" border="0" /></li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong> <li>Click <<strong>>Activate free license </<strong>>to start the free 30 days trial and remove the malicious files.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><img title="Activate HitmanPro free license to remove detected infections" src="http://malwaretips.com/images/removalguide/hpro6.png" alt="[Image: hitmanpro-activation.png]" width="532" height="421" border="0" /></li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong> <li>HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong></ol></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p></blockquote><p></p>
[QUOTE="Fiery, post: 89602, member: 9"] Ok good, next, open Roguekiller again and click the DNS tab, make sure these 2 entries are selected [DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{0B7C6A63-F272-49C7-9582-E9E210BD1530} : NameServer (8.8.8.8,8.8.8.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1) -> FOUND [DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{0B7C6A63-F272-49C7-9582-E9E210BD1530} : NameServer (8.8.8.8,8.8.8.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1) -> FOUND then click on the DNS Fix button. Download TDSSKiller (.exe one) from [url=http://www.bleepingcomputer.com/download/tdsskiller/] here[/url] and save it to your Desktop. [list] [*]Doubleclick on TDSSKiller.exe to run the application, then on [b]Start Scan.[/b] [*]If an infected file is detected, the default action will be[b] Cure[/b], click on Continue. [*]If a suspicious file is detected, the default action will be [b]Skip[/b], click on Continue. [*]It may ask you to reboot the computer to complete the process. Click on [b]Reboot Now[/b]. [*]If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here. [*]If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here. [/list] Then, Download Malwarebytes' Anti-Malware([url=http://www.malwarebytes.org/products/malwarebytes_free/][color=blue][b]download link[/b][/color][/url]) to your desktop [img]http://cache.filehippo.com/img/ex/1208__malwarebytes.png[/img] [list] [*]Double-click [b]mbam-setup.exe[/b] and follow the prompts to install the program. [*]At the end, be sure a checkmark is placed next to[list] [*] [b]Update Malwarebytes' Anti-Malware[/b] [*] and [b]Launch Malwarebytes' Anti-Malware[/b][/list][*] then click [b]Finish[/b]. [*]Malwarebytes Anti-Malware will now start and you'll be prompted to start a trial period , please select '<[b]>Decline</[b]>' <img title="Decline trial period in Malwarebytes Anti-Malware" src="http://malwaretips.com/images/removalguide/mbam3.PNG" alt="[Image: Decline Malwarebytes trial]" width="432" height="165" border="0" /> [*]If an update is found, it will download and install the latest version. [img]http://img5.imageshack.us/img5/2738/42456544.jpg[/img] [*]Once the program has loaded, select [b]Perform quick scan[/b], then click [b]Scan[/b]. [*]When the scan is complete, click [b]OK[/b], then [b]Show Results[/b] to view the results. [img]http://img651.imageshack.us/img651/733/55713761.jpg[/img] [*]Be sure that everything is Checked (ticked) and click on [b]Remove Selected[/b]. [*]Reboot your computer if prompted.[/b][/b][/list][b][b] Lastly, remove any left over malicious files with HitmanPro <ol> <li>This step can be performed in <[b]>Normal Mode</[b]> ,so please <[b]>download the latest official version of HitmanPro</[b]>. <a href="http://malwaretips.com/download-hitmanpro" rel="nofollow" target="_blank"> <[b]>HITMANPRO DOWNLOAD LINK</[b]></a> <em>(This link will open a download page in a new window from where you can download HitmanPro)</em></li> <li><[b]>Double click on the previously downloaded file</[b]> to start the HitmanPro installation. <img title="HitmanPro Installer" src="http://malwaretips.com/images/removalguide/hpro1.png" alt="[Image: hitmanpro-icon.png]" width="54" height="58" border="0" /> <[b]>IF</[b]> you are experiencing problems while trying to starting HitmanPro, you can use the "<em>Force Breach</em>" mode.To start this program in Force Breach mode,<[b]> hold down the left CTRL-key when you start HitmanPro</[b]> and all non-essential processes are terminated, including the malware process. (<a href="http://www.youtube.com/watch?feature=player_embedded&v=m6eRWTv2STk" target="_blank">How to start HitmanPro in Force Breach mode - Video</a>)</li> <li>Click on <[b]>Next </[b]>to install HitmanPro on your system. <img title="HitmanPro installation process" src="http://malwaretips.com/images/removalguide/hpro2.png" alt="[Image: installing-hitmanpro.png]" width="532" height="421" border="0" /></li> <li>The setup screen is displayed, from which you can decide whether you wish to install HitmanPro on your machine or just perform a one-time scan, select a option then click on <[b]>Next </[b]>to start a system scan. <img title="HitmanPro setup options" src="http://malwaretips.com/images/removalguide/hpro3.png" alt="[Image: hitmanpro-setup-options.png]" width="532" height="421" border="0" /></li> <li>HitmanPro will start scanning your system for malicious files. Depending on the the size of your hard drive, and the performance of your computer, this step will take several minutes. <img title="HitmanPro scanning for Win 8 Security System" src="http://malwaretips.com/images/removalguide/hpro4.png" alt="[Image: hitmanpro-scanning.png]" width="532" height="421" border="0" /></li> <li>Once the scan is complete,a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click <[b]>Next</[b]>. <img title="HitmanPro Win 8 Security System scan results" src="http://malwaretips.com/images/removalguide/hpro5.png" alt="[Image: hitmanpro-scan-results.png]" width="532" height="421" border="0" /></li> <li>Click <[b]>Activate free license </[b]>to start the free 30 days trial and remove the malicious files. <img title="Activate HitmanPro free license to remove detected infections" src="http://malwaretips.com/images/removalguide/hpro6.png" alt="[Image: hitmanpro-activation.png]" width="532" height="421" border="0" /></li> <li>HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.</li> </ol>[/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
