[gringo_pr]

Greetings


I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools




Gringo

[Advertisements]

Sorry, I've been working 12hr night shifts the last 3 day and have been sleeping all day. Just heading home to get a few hours of sleep then I'm off for three days. Will complete your last recommendations this afternoon and get back to you.

[keegen]

Sorry, I've been working 12hr night shifts the last 3 day and have been sleeping all day. Just heading home to get a few hours of sleep then I'm off for three days. Will complete your last recommendations this afternoon and get back to you.

[gringo_pr]

OK I will see you later then

[keegen]

I ran Malwarebytes Anti-Rootkit. When it was done, it said that it found nothing and no clean-up was necessary.

The pop-ups are still active.

[gringo_pr]

Hello


in which browser does this happen in?

[keegen]

Using IE9.

[gringo_pr]

Greetings,

first I would like you to go here and click on the fixit button - http://support.microsoft.com/kb/923737


Then I want you to do the following

• Start Internet Explorer.
• click on "safety"
• click on "Delete Browsing History"
• make sure all boxes are checked
• click on "Delete"
• click on "Tools",
• click "Internet Options".
• On the "Advanced" tab, click "Reset"
• put a check mark next to "Delete Personal Settings"
• click "Reset" to confirm
• when complete click the "Close" button
• restart IE

Gringo

[keegen]

Sorry for the delay. Once again work has taken me away from the computer for a few days. Will report back on Saturday.

[gringo_pr]

no problem and I will check on you saterday

[gringo_pr]

Greetings


I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools




Gringo

[keegen]

Okay, I did the the steps you outlined and have bun running IE for about an hour and have not had a pop up. So, it seems to be fixed. Thank you very much!

[gringo_pr]

Hello

I would like to see a report that combofix makes.

extra combofix report

• push the "windows key" + "R" (between the "Ctrl" button and "Alt" Button)
• please copy and past the following into the box

C:\Qoobox\Add-Remove Programs.txt

• click ok

copy and paste the report into this topic for me to review

Gringo

[gringo_pr]

Greetings


I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools




Gringo

[gringo_pr]

Hello

48 Hour bump

It has been more than 48 hours since my last post.

• do you still need help with this?
• do you need more time?
• are you having problems following my instructions?
  
• if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo

[keegen]

Hello, sorry for not responding. I had a major hard drive crash and am just getting back up and running with a new hard drive after doing a clean reinstall of widows. Luckily I had most of my info backed up and IE is running great with the clean install. I run an up to date version of Norton but is there anything else I should be running to prevent this from happening again?