-
Content Count
425 -
Joined
-
Last visited
Content Type
Profiles
Forums
Calendar
Everything posted by Rorschach112
-
Pick up an unwanted hijacker[RESOLVED]
Rorschach112 replied to roryawilson's topic in Malware Removal
that fix your internet explorer ? if not do this 1. Download IEFix, unzip it to your Desktop, and run it. 2. Click the Apply button. 3. You'll be prompted for the Operating System CD or the Service Pack Files location: If you're using Windows XP, insert the Operating System CD. For OEM systems, point to the Operating System source path when prompted. If you've applied a Service Pack separately, you need to insert the Slipstreamed Operating System CD (if you have one) or point the installer to the ServicePack source path when prompted (see the image below). Mention the path as "C:\Windows\Ser -
Pick up an unwanted hijacker[RESOLVED]
Rorschach112 replied to roryawilson's topic in Malware Removal
try this Please download OTM Save it to your desktop. Please double-click OTM to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator). Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy): :Processes :Services :Reg :Files :Commands [purity] [emptytemp] [Reboot] [resethosts] Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste. Click the red Moveit! button. Copy ev -
Pick up an unwanted hijacker[RESOLVED]
Rorschach112 replied to roryawilson's topic in Malware Removal
Your logs are clean Now we need to create a new System Restore point. Click Start Menu > Run > type (or copy and paste) %SystemRoot%\System32\restore\rstrui.exe Press OK. Choose Create a Restore Point then click Next. Name it and click Create, when the confirmation screen shows the restore point has been created click Close. Next goto Start Menu > Run > type cleanmgr Click OK, Disk Cleanup will open and start calculating the amount of space that can be freed, Once thats finished it will open the Disk Cleanup options screen, click the More Options tab then click Clean up on the syst -
Pick up an unwanted hijacker[RESOLVED]
Rorschach112 replied to roryawilson's topic in Malware Removal
hi Download TFC to your desktop Open the file and close any other windows. It will close all programs itself when run, make sure to let it run uninterrupted. Click the Start button to begin the process. The program should not take long to finish its job Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean Please download Malwarebytes' Anti-Malware from Here Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If -
Pick up an unwanted hijacker[RESOLVED]
Rorschach112 replied to roryawilson's topic in Malware Removal
Open OTL again and click the Quick Scan button. Post the log it produces in your next reply. -
Pick up an unwanted hijacker[RESOLVED]
Rorschach112 replied to roryawilson's topic in Malware Removal
we will fix that later, follow my steps in the meantime -
Pick up an unwanted hijacker[RESOLVED]
Rorschach112 replied to roryawilson's topic in Malware Removal
hi Run OTL Under the Custom Scans/Fixes box at the bottom, paste in the following :OTL SRV - File not found -- -- (McSysmon) SRV - File not found -- -- (McShield) SRV - File not found -- -- (MBYPJH) [2009/11/19 14:16:28 | 00,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll [2009/11/19 14:16:29 | 00,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll O4 - HKLM..\Run: [smjxdgpv] C:\Documents and Settings\Rory Wilson\Local Settings\Application Data\jsfofj\lhojsysguard.exe () O4 - HKCU..\Run: [sm -
Nasty virus and malware issue got me locked down![RESOLVED]
Rorschach112 replied to deocder's topic in Malware Removal
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic. -
Nasty virus and malware issue got me locked down![RESOLVED]
Rorschach112 replied to deocder's topic in Malware Removal
Your logs are clean Follow these steps to uninstall Combofix and tools used in the removal of malware Uninstall ComboFix Remove Combofix now that we're done with it. Please press the Windows Key and R on your keyboard. This will bring up the Run... command. Now type in Combofix /Uninstall in the runbox and click OK. (Notice the space between the "x" and "/") Please follow the prompts to uninstall Combofix. You will then recieve a message saying Combofix was uninstalled successfully once it's done uninstalling itself. Download OTC to your desktop and run it Click Yes to beginning the Clean -
Nasty virus and malware issue got me locked down![RESOLVED]
Rorschach112 replied to deocder's topic in Malware Removal
hi CLICK HERE to download the HijackThis Installer: Save HJTInstall.exe to your desktop. Double-click on HJTInstall.exe to run the program. By default it will install to C:\Program Files\Trend Micro\HijackThis. Accept the license agreement by clicking the "I Accept" button. Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log. Click "Save log" to save the log file and then the log will open in Notepad. Click on "Edit -> Select All" then click on "Edit -> Copy" to copy the entire contents of the log. Come back here to this thread and p -
Nasty virus and malware issue got me locked down![RESOLVED]
Rorschach112 replied to deocder's topic in Malware Removal
hi Download TFC to your desktop Open the file and close any other windows. It will close all programs itself when run, make sure to let it run uninterrupted. Click the Start button to begin the process. The program should not take long to finish its job Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean Please download Malwarebytes' Anti-Malware from Here Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If -
Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed.
-
Nasty virus and malware issue got me locked down![RESOLVED]
Rorschach112 replied to deocder's topic in Malware Removal
you shouldn't run combofix yourself, it is a dangerous tool to use Open notepad and copy/paste the text in the quotebox below into it: Save this as CFScript.txt Refering to the picture above, drag CFScript.txt into ComboFix.exe When finished, it shall produce a log for you. Post that log in your next reply. **Note** When CF finishes running, the ComboFix log will open along with a message box--do not be alarmed. With the above script, ComboFix will capture files to submit for analysis. Ensure you are connected to the internet and click OK on the message box. -
Is this something to worrie about?[RESOLVED]
Rorschach112 replied to sceeter32's topic in Malware Removal
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic. -
Hi and welcome to BestTechie! I'll be assisting you to clean up your computer. The first thing I need you to do is follow the steps in this thread. Make sure you go through all of the procedures, and post back here with the logs you get back.
-
Is this something to worrie about?[RESOLVED]
Rorschach112 replied to sceeter32's topic in Malware Removal
Looks like a false positive If you are having no problems, don't worry bout it -
If you want to learn about ComboFix and other malware removal tools, you should enroll in one of the schools
-
sysguard virus-now no "exe" "desktop" "task bar" "safe mode"[INACTIVE]
Rorschach112 replied to roz's topic in Malware Removal
Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed. -
Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed.
-
sysguard virus-now no "exe" "desktop" "task bar" "safe mode"[INACTIVE]
Rorschach112 replied to roz's topic in Malware Removal
you have the file OTL.exe on your desktop right ? Right click on it, select Rename, call it "svchost.com", then double click it to run it and follow my previous instructions -
Cannot install or run malware removal programs[INACTIVE]
Rorschach112 replied to goobertron's topic in Malware Removal
Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed. -
For assistance with malware, please read How To Post An OTL Log in the Malware Removal Forum.
-
sysguard virus-now no "exe" "desktop" "task bar" "safe mode"[INACTIVE]
Rorschach112 replied to roz's topic in Malware Removal
If you cant get OTL.exe to run then rename it to svchost.com and it should run then -
sysguard virus-now no "exe" "desktop" "task bar" "safe mode"[INACTIVE]
Rorschach112 replied to roz's topic in Malware Removal
rename the tools to svchost.com do they run then ? -
sysguard virus-now no "exe" "desktop" "task bar" "safe mode"[INACTIVE]
Rorschach112 replied to roz's topic in Malware Removal
Hi and welcome to BestTechie! I'll be assisting you to clean up your computer. The first thing I need you to do is follow the steps in this thread. Make sure you go through all of the procedures, and post back here with the logs you get back.