Reply to thread

Message: <blockquote data-quote="Jack" data-source="post: 63139" data-attributes="member: 1">We will help you build your security configuration later,in the mean time you can enable Malwarebytes Anti-Malware.Next,please perform the following steps:STEP 1: Run a HitmanPro scan<ol>    <li><>Download the latest official version of HitmanPro</>.<a href="http://www.surfright.nl/en/hitmanpro/" rel="nofollow" target="_blank"> <>HITMANPRO DOWNLOAD LINK</></a> (This link will open a download page in a new window from where you can download HitmanPro)</li>    <li>Start HitmanPro by <>double clicking on the previously downloaded file.</> and then following the prompts.>>> IF you are experiencing problems while trying to start HitmanPro, you can use the Force Breach mode.To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (<a href="http://www.youtube.com/watch?v=m6eRWTv2STk" target="_blank">How to start HitmanPro in Force Breach mode – Video</a>)<img src="http://malwaretips.com/images/removalguide/hpro4.png" alt="[Image: hitmanproscan4.png]" border="0" /></li>    <li>Once the scan is complete, a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click <>Next</> .<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/02/rsz_hpro5.png" alt="[Image: hitmanproscan5.png]" border="0" /></li>    <li>Click <>Activate free license</> to start the free 30 days trial and remove the malicious files.<img src="http://malwaretips.com/images/removalguide/hpro6.png" alt="[Image: hitmanproscan6.png]" border="0" /></li>    <li>HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.</ol>Add to your next  reply, any log that HitmanPro might generate.<hr />STEP 2: Run a scan with RogueKiller<ol>    <li>Please <>download the latest official version of </><>RogueKiller</>.<a href="http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe" rel="nofollow" target="_blank"><>ROGUEKILLER DOWNLOAD LINK</></a> (This link will automatically download RogueKiller on your computer)</li>    <li><>Double click on RogueKiller.exe</> to start this utility and then <>wait for the Prescan to complete</>.This should take only a few seconds and then you can <>click the Start button</> to perform a system scan.<img title="Click on the Start button to perform a system scan" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-1.png" alt="[Image: roguekiller-1.png]" width="600" height="450" border="0" /></li>    <li>After the scan has completed, <>press the Delete button</> to remove any malicious registry keys.<img title="Press Delete to remove the malicious registry keys" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-2.png" alt="[Image: roguekiller-2.png]" width="600" height="450" border="0" /></li>    <li>Next we will need to restore your shortcuts, <>so click on the ShortcutsFix button </>and allow the program to run.<img title="Click on the Start button to perform a system scan" src="http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-3.png" alt="[Image: roguekiller-1.png]" width="600" height="450" border="0" /></li></ol>The report has been created on the desktop.In your next reply please post:  All RKreport.txt text files located on your desktop.<hr />STEP 3: Run a scan with ESET Online Scanner.<ol>    <li>Download ESET Online Scanner utility.<><a title="External link" href="http://download.eset.com/special/eos/esetsmartinstaller_enu.exe" rel="nofollow">ESET ONLINE SCANNER DOWNLOAD LINK</a></> (This link will automatically download ESET Online Scanner on your computer.)</li>    <li>Double click on the Eset installer program (esetsmartinstaller_enu.exe).</li>    <li>Check <>Yes, I accept the Terms of Use</></li>    <li>Click the <>Start</> button.</li>    <li>Check <>Scan archives</></li>    <li>Push the <>Start</> button.</li>    <li>ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.</li>    <li>When the scan completes, push <>List of found threats</></li>    <li>Push <>Export to Text file </> and save the file to your desktop using a unique name, such as <>ESET Scan</>. Include the contents of this report in your next reply.Note - when ESET doesn't find any threats, no report will be created.</li>    <li>Push the <>back</> button.</li>    <li>Push <>Finish</></li></ol><hr />STEP 4: Run Windows Repair All in One<ol><li>Download the Windows Repair All in One utility from the below link.<a title="External link" href="http://www.tweaking.com/content/page/windows_repair_all_in_one.html" rel="nofollow"><>WINDOWS REPAIR ALL IN ONE DOWNLOAD LINK</></a> (This link will open a download page in a new window from where you can download Windows Repair All in One Portable version)</li>    <li>Double-click <>tweaking.com_windows_repair_aio.zip</> and extract the <>Tweaking.com - Windows Repair</> folder to your desktop.</li>    <li>Now open this folder and double-click <>Repair_Windows.exe</>.</li>    <li>Click the <>Start Repairs</> tab on the far right.</li>    <li>Click the <>Start</> button (bottom right)Note: When asked if you would like to create a restore point. It is recommended just in-case something does not go as planned.</li>    <li>Click <>Unselect All</></li>    <li>Put a checkmark in the following items:<ul>    <li>Repair Hosts File</li>    <li>Remove Temp Files</li>    <li>Remove Policies Set By Infections</li></ul>Note: Leave everything else unchecked</li>    <li>Put a checkmark in <>Restart System When Finished</></li>    <li>Now click the <>Start</> button (bottom right)</li></ol><hr />STEP 5: Run a scan with OTL by OldTimer<ol><li>Download the OTL utility using the below link : <><a title="External link" href="http://oldtimer.geekstogo.com/OTL.exe" rel="nofollow external">OTL DOWNLOAD LINK</a> (This link will automatically download OTL on your computer)</></li><li>Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/OTL-logo.png" alt="" title="OTL-logo" width="106" height="118" class="alignnone size-full wp-image-3946" /></li><li>When the window appears, <>underneath Output</> at the top change it to <>Minimal Output</>.</li><li>Check the boxes beside <>LOP Check</> and <>Purity Check</>.</li><li>Under the Custom Scan box paste this in:<code>%SYSTEMDRIVE%\*.exe%ALLUSERSPROFILE%\Application Data\*.exe%APPDATA%\*./md5startatapi.sysexplorer.exewinlogon.exeUserinit.exesvchost.execsrss.exePrintIsolationHost.execonsrv.dll/md5stop%systemroot%\*. /mp /shklm\software\clients\startmenuinternet|command /rs%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfiles%systemroot%\system32\drivers\*.sys /lockedfilesCREATERESTOREPOINT</code></li><li>Click the<> Run Scan</> button.<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/otl-custom.png" alt="" title="OTL with Custom scans" width="658" height="584" class="alignnone size-full wp-image-3945" /></li><li>When the scan completes, it will open a <>OTL.Txt</>. This will be saved in the same location as OTL.<>Please post this log in your next reply.</>.</li></ol>Note: If OTL.exe will not run, it may be blocked by malware. Try these alternate versions: <a title="External link" href="http://www.itxassociates.com/OT-Tools/OTL.scr" rel="nofollow external">OTL.scr</a>, or <a title="External link" href="http://oldtimer.geekstogo.com/OTL.com" rel="nofollow external">OTL.com</a>.<hr />What's next?Attach the following logs to your post (You can find <a href="http://malwaretips.com/Thread-How-to-use-the-attachment-system?pid=16072#pid16072" target="_blank">here</a> details on how to use the Attachment System):1.RogueKiller logs 2.HitmanPro log3.ESET log4.OTL logs5.Let me know if you had any problems with the above instructions and also let me know how things are running now!</blockquote>

Verification

Top