I Cant Get Rid Of Unidenfied Malware

S

scottvsaunders

Member
Hi,

I have had some software installed on my PC that I cant get rid of. Basically it puts a yellow exclamation mark in the system tray and tells me that my pc is infected. I get pop up messages telling me to go to a site to purchase a malware remover. I have also got a tool bar at the top of internet explorer 6 showing protection bar, scan for spy ware and remove adware and popup. What can I do to get rid of this crap..

Thanks
 
Download Hijackthis.
http://www.trendsecure.com/portal/en-US/threat_analytics/HiJackThis_v2.exe

Install and run the program, from the main menu select "scan and save a logfile". Post the log here.

Download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply, along with the Hijackthis log.
 
There's no Hijackthis log there, doesn't matter, run Hijackthis again after doing these steps.

You should print out these instructions, or copy them to a Notepad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Please reboot your computer in Safe Mode by doing the following :
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, a menu with options should appear;
  • Select the first option, to run Windows in Safe Mode, then press "Enter".
  • Choose your usual account.
Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".


The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart anyway into normal Windows. A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply along with a new HijackThis log.
The report can also be found at the root of the system drive, usually at C:\rapport.txt
 
You must log in or register to reply here.
Back
Top