Trojan JS/Medfos.B [Closed]
Posted 09 October 2012 - 01:41 PM
Posted 10 October 2012 - 10:49 AM
It may well be worth you printing/saving the instructions throughout the fix, so you have them to hand just in case you are unable to access this site.
- Remember to post your logs, not attach them. So, any logs from any programs we run, should be just 'copied & pasted' into your reply.
- Please only run the tools that I request. I know malware can be frustrating but running other tools in the meantime and between posts, only makes it harder for us to analyse and fix your PC in the long run.
- Please subscribe to this topic if you have not already done so. Please check back just in case, as the email system can fail at times.
- Just because your machine is running better does not mean it is completely cleaned. Please wait for the 'all clear' from me to say when we are done.
- Please reply within 3 days to be fair to other people asking for help.
- Please tell me if you have your original Windows CD/DVD available
- When in doubt, please stop and ask first. There's no harm in asking questions!
Please follow the steps bellow:
- Please download aswMBR.exe to your desktop.
- Double click the aswMBR.exe to run it.
- When asked if you want to download Avast's virus definitions please select Yes.
Note: If avast! antivirus is already installed, just do the next step.
- Click the Scan button to start scan.
- On completion of the scan click Save log, save it to your desktop and post in your next reply.
- Also on Desktop there should be a file called MBR.dat after that. Please attach it here.
How to add an attachment to a new topic or reply
OTL Custom Scan
- Download OTL to your desktop.
- Double click on the icon to run it.
- Make sure all other windows are closed and to let it run uninterrupted.
- When the window appears, underneath Output at the top, make sure Stadard output is selected.
- Select Scan all users
- Under the Extra Registry section, check Use SafeList
- Check the boxes beside LOP Check and Purity Check.
- Under the Custom Scans/Fixes box copy and paste this in:
netsvcs %SYSTEMDRIVE%\*.exe %systemdrive%\$Recycle.Bin|@;true;true;true /md5start services.* explorer.exe winlogon.exe userinit.exe svchost.exe consrv.dll /md5stop HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Local\AutoProxyCache /s %systemroot%\*. /mp /s %Temp%\smtmp\*.* /s hklm\software\clients\startmenuinternet|command /rs hklm\software\clients\startmenuinternet|command /64 /rs CREATERESTOREPOINT
- Click the button. Do not change any settings unless otherwise told to do so. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic
Posted 20 November 2012 - 06:19 PM
If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users