help&get_help_motive Posted May 17, 2012 Share Posted May 17, 2012 hi guys firstly I could not launch any application. I had ukash virus on my laptop, it wouldn't let me do anything on my laptop. i could log in and that's all. I restarted laptop in Safe mode ( didn't change any settings) and then logged back in as normal, it worked. I then installed AVG which picked a lot more viruses. i want to check if i have completely removed all the viruses or not. any help is appreciated thanks a lot in adv. Link to post Share on other sites
caintry_boy Posted May 17, 2012 Share Posted May 17, 2012 Download Malwarebytes > http://majorgeeks.co...ware_d5756.html Run it like this: Double-click mbam-setup.exe and follow the prompts to install the program. At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select Perform quick scan, then click Scan. When the scan is complete, click OK, then Show Results to view the results. Be sure that everything is checked, and click Remove Selected. When completed, a log will open in Notepad. Please save it to a convenient location and post the results. Link to post Share on other sites
help&get_help_motive Posted May 17, 2012 Author Share Posted May 17, 2012 hi caintry_boy thanks a lot for a quick reply here are the results 7 Malwarebytes Anti-Malware (Trial) 1.61.0.1400 www.malwarebytes.org Database version: v2012.05.17.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 8.0.7601.17514 Dhillon :: DHILLON-PC [administrator] Protection: Enabled 17/05/2012 23:34:06 mbam-log-2012-05-17 (23-34-06).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 215513 Time elapsed: 7 minute(s), 57 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 1 HKCUSOFTWAREMicrosoftWindows NTCurrentVersionWindows|Load (Trojan.Ransom) -> Data: C:UsersDhillonLOCALS~1Tempmscfyrva.com -> Delete on reboot. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 3 C:UsersDhillonAppDataLocalTemp~!#7273.tmp (Trojan.Agent.TRGen) -> Quarantined and deleted successfully. C:UsersDhillonAppDataLocalTemp~!#7478.tmp (Trojan.Zbot) -> Quarantined and deleted successfully. C:UsersDhillonAppDataLocalTemp~!#7C26.tmp (Spyware.Password) -> Quarantined and deleted successfully. (end) Link to post Share on other sites
help&get_help_motive Posted May 17, 2012 Author Share Posted May 17, 2012 Update Did what u asked posted the results An then it prompted to restart. I did that now I cannot start windows as normal. It keeps restarting if I choose start as normal. There is another option start in recover mode. What should I do? is this the main problem?? Link to post Share on other sites
caintry_boy Posted May 18, 2012 Share Posted May 18, 2012 Yup! That's a major problem... Reboot in Safe Mode w/Networking (tap the F8 key at startup to get the boot menu) and post the results of your Malwarebytes scan in a new thread here > http://forums.pcpitstop.com/index.php?/forum/25-have-i-been-hijacked/ Wait for further help there from one of our Trusted Malware Techs, they work other forums as well as ours but will get you fixed up. Link to post Share on other sites
help&get_help_motive Posted May 18, 2012 Author Share Posted May 18, 2012 Yup! That's a major problem... Reboot in Safe Mode w/Networking (tap the F8 key at startup to get the boot menu) and post the results of your Malwarebytes scan in a new thread here > http://forums.pcpits...-been-hijacked/ Wait for further help there from one of our Trusted Malware Techs, they work other forums as well as ours but will get you fixed up. thanks a lot for ur help. Link to post Share on other sites
Recommended Posts
Archived
This topic is now archived and is closed to further replies.