[Essexboy]

Nothing anomalous there ? Lets try MBAM and see what that shows

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

[Advertisements]

This is really strange is there a way to give you an AVG log, that is what is detecting it...

mbam log
Malwarebytes' Anti-Malware 1.20
Database version: 935
Windows 5.1.2600 Service Pack 2

00:12:41 10/07/2008
mbam-log-7-10-2008 (00-12-41).txt

Scan type: Quick Scan
Objects scanned: 62798
Time elapsed: 17 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Alex_McIntosh]

This is really strange is there a way to give you an AVG log, that is what is detecting it...

mbam log
Malwarebytes' Anti-Malware 1.20
Database version: 935
Windows 5.1.2600 Service Pack 2

00:12:41 10/07/2008
mbam-log-7-10-2008 (00-12-41).txt

Scan type: Quick Scan
Objects scanned: 62798
Time elapsed: 17 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Essexboy]

I am not totally au fait with AVG, but there should be a log within AVG that gives you a breakdown or failing that look in the vault for the files it is reporting

Could you also get me a screen shot of any popups you get

[Alex_McIntosh]

Yeah, here si the stroy...

My sister freaks out cos she gets pop-ups.. So i said ill take a look, then researching an entry i found it looked beyond my knowledge from the course here so far so i thought I'd better ask. I only go round there, ask how it is going she always says "Still getting pop-ups, its running really slow as well..." so i then do your instructions and go home, that is what i do lol, keep repeating that...

So i'll tell her how to print screen and ill get her to save them all up for you.... Also, i've tried getting a log from avg before and i couldn't because it wont put it into a word document, only show you it within the program.... I'll do a bit of Google searching on that though, there must be a way...

Should i tell you what i think is bad from the HJT log? and also, should i print screen the AVG scan report to show you all the Trojans and that way you can see them anyway...?

[Essexboy]

There is nothing that I can see in your Hijackthis log

I really do need to see a screenshot of the popups plus what AVG is reporting

We will now do a deep search of your processes and files

Download avz4.zip from here

• Unzip it to your desktop to a folder named avz4
• Double click on AVZ.exe to run it.
• Run an update by clicking the Auto Update button on the Right of the Log window:
• Click Start to begin the update

Note: If you recieve an error message, chose a different source, then click Start again

• Start AVZ.
  
• Choose from the menu "File" => "Standard scripts " and mark the "Healing/Quarantine and Advanced System Investigation" check box.
• Click on the “Execute selected scripts”.
• Automatic scanning, healing and system check will be executed.
• A logfile (avz_sysinfo.htm) will be created and saved in the LOG folder in the AVZ directory as virusinfo_syscure.zip.
• It is necessary to reboot your machine, because AVZ might disturb some program operations (like antiviruses and firewall) during the system scan.
• All applications will work properly after the system restart.

When restarted

• Start AVZ.
  
• Choose from the menu "File" => "Standard scripts " and mark the “Advanced System Investigation" check box.
• Click on the "Execute selected scripts".
• A system check will be automatically performed, and the created logfile (avz_sysinfo.htm) will be saved in the LOG folder in the AVZ directory as virusinfo_syscheck.zip.

Attach both zip files to your next post

[Alex_McIntosh]

http://www.mediafire...?id=xtwu7dywbx9

[Alex_McIntosh]

here is 1 of the pop-ups:
http://www.mediafire...?id=0sa0yicczbu

[Alex_McIntosh]

http://www.mediafire...?id=1xw4jjmnnmt

latest AVG Scan..


Seems it got rid of trojans detected but it is still finding tracking cookies...

[Essexboy]

These popups only occur on certain sites, is that correct ?

Do you use Yahoo as your ISP ?

Tracking cookies are a fact of life I'm afraid

Update to IE7 which has a built in popup blocker http://www.microsoft...;displaylang=en

AVZ again showed clear

[Alex_McIntosh]

Hmm, alright mate,. well thanks for the help.. I quess you can make it as resolved, AVG must of cleared everything then on its own :S They said its still running bad but then it might just be there computer..

Thanks for the help though, and the time you have put into this.

BTW, you dont need to be afriad fo tracking cookies

Thanks mate...

[Alex_McIntosh]

Forgot to say, why does it matter about yahoo?

[Essexboy]

Now the best part of the day ----- Your log now appears clean

Double click OTMoveIt2 once again and you should see a CleanUp! button, press that button, you may get prompted by your firewall that OTMoveIt2 wants to contact the internet, allow this, a cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will delete all the tools you have downloaded plus itself. MBAM and AVZ will need to be manually removed


Now to get you off to a good start we will re-set your restore points so that all the bad stuff is gone for good. Then if you need to restore at some stage you will be clean. There are several ways to reset your your restore point but this is my method:

1. Select Start > All Programs > Accessories > System tools > System Restore.
2. On the dialogue box that appears select Create a Restore Point
3. Click NEXT
4. Enter a name e.g. Clean
5. Click CREATE

You now have a clean restore point, to get rid of the bad ones:

1. Select Start > All Programs > Accessories > System tools > Disk Cleanup.
2. In the Drop down box that appears select your main drive e.g. C
3. Click OK
4. The System will do some calculation and the display a dialogue box with TABS
5. Select the More Options Tab.
6. At the bottom will be a system restore box with a CLEANUP button click this
7. Accept the Warning and select OK again, the program will close and you are done



Now that you are clean, to help protect your computer in the future I recommend that you get the following free program:

• SpywareBlaster to help prevent spyware from installing in the first place.
• SuperAntispyware Run weekly to keep your system clean

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To keep your operating system up to date visit

• Secunia Software inspector To check your programme update status
• Microsoft Windows Update

To learn more about how to protect yourself while on the internet read this article by Tony Klien: So how did I get infected in the first place?


Keep safe

[Essexboy]

Forgot to say, why does it matter about yahoo?

They have an adclicker problem

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.