Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.
Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.
DO NOT RUN ComboFix unless requested to.
Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.
When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.
Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
Make sure you are connected to the Internet.
Double-click on mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
Make sure the "Perform Full Scan" option is selected.
Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
Click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
regards, Elise
"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton Follow BleepingComputer on: Facebook | Twitter | Google+
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
Scan potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.
regards, Elise
"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton Follow BleepingComputer on: Facebook | Twitter | Google+
got a fault...last friday i did the ESET scan and yeah it took longer than i expected, i need to leave during that day and has to bring my laptop with me, so i stopped the scan and turned it off. This afternoon i run it again and now im sending u the report:
I just have a litlle concern, my browser (firefox) has this mania of freezing and saying : not responding. My computer freezes.. does it means is still has some virus?
At this point I do not think the freezes are caused by infections; you mentioned earlier it turns also off randomly. When this happens, does the computer feel hot to the touch?
regards, Elise
"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton Follow BleepingComputer on: Facebook | Twitter | Google+
No, as explained most likely your computer is overheating, possibly due to dirty fans/inside of the laptop. You can attempt to clean that yourself (blow the fans through with compressed air) or ask a repairshop/technical savvy friend/family member to help you with that.
If the computer feels hot to the touch, be sure not to continue too long with it, as it might cause permanent hardware damage!
As far as malware is concerned, your computer is clean.
ALL CLEAN
--------------
Your machine appears to be clean, please take the time to read below on how to secure the machine and take the necessary steps to keep it clean
Please do the following to remove the remaining programs from your PC:
Delete the tools used during the disinfection:
Click start > run and type combofix /uninstall, press enter. This will remove Combofix from your computer.
Please read these advices, in order to prevent reinfecting your PC:
Install and update the following programs regularly:
an outbound firewall. If you are connected to the internet through a router, you are already behind a hardware firewall and as such you do not need an extra software firewall.
A comprehensive tutorial and a list of possible firewalls can be found here.
an AntiVirus Software
It is imperative that you update your AntiVirus Software on regular basis.If you do not update your AntiVirus Software then it will not be able to catch the latest threats.
an Anti-Spyware program Malware Byte's Anti Malware is an excellent Anti-Spyware scanner. It's scan times are usually under ten minutes, and has excellent detection and removal rates. SUPERAntiSpyware is another good scanner with high detection and removal rates.
Both programs are free for non commercial home use but provide a resident and do not nag if you purchase the paid versions.
Spyware Blaster
A tutorial for Spywareblaster can be found here. If you wish, the commercial version provides automatic updating.
Keep Windows (and your other Microsoft software) up to date!
I cannot stress how important this is enough. Often holes are found in Internet Explorer or Windows itself that require patching. Sometimes these holes will allow an attacker unrestricted access to your computer.
Therefore, please, visit the Microsoft Update Website and follow the on screen instructions to setup Microsoft Update. Also follow the instructions to update your system. Please REBOOT and repeat this process until there are no more updates to install!!
Keep your other software up to date as well
Software does not need to be made by Microsoft to be insecure. You can use the Secunia Online Software occasionally to help you check for out of date software on yourmachine.
Stay up to date!
The MOST IMPORTANT part of any security setup is keeping the software up to date. Malware writers release new variants every single day. If your software updates don't keep up, then the malware will always be one step ahead. Not a good thing.
Commonly Used Freeware Replacements: a nice list of freeware programs in all categories, that are regarded as useful by the users of this forum.
osalt: Find (free) open source alternatives to known commercial software.
Please reply to this topic if you have read the above information. If your computer is working fine, this topic will be closed afterwards.
regards, Elise
"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton Follow BleepingComputer on: Facebook | Twitter | Google+
Elise, thank you very much for you help and patience and kindness.
I am very, very grateful to you and to the rest of the bleeping community.
I hope that I wouldn't have any problems in the future. If in case, I would surely run to you again.
I just wanna clarify, this computer of mine cannot be trusted anymore in regards bto money or bank info right?
And another questionl, do we know who is the hacker, from country and when did it happen?
How about the case of my computer freezing, what would be the cause of that?
How about the case of my computer freezing, what would be the cause of that?
See the first comment in my last reply, this is most likely a hardware/overheating issue.
As for the hacking; this is not a person who hacked your computer because of a personal interest. It is a group only interested in using your computer to be a part of a large botnet (as a so-called zombie) which can be used for online attacks against different targets (for example DDoS attacks for a specific site). Although theoretically the group responsible for the rootkit that infected you, could trace you back, it is not very likely this will happen. Still, the possibility remains there.
regards, Elise
"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton Follow BleepingComputer on: Facebook | Twitter | Google+
Okay Elise... by the way another question. Just now, my computer restarted all by itself....a bluse screen appeared saying : problem detected computer needs to be shut down, etc., etc.
Once again, because you accuse the noise, I really recommend to take the laptop to a repair shop and have the components cleaned and checked out. If you don't do this, you risk permanently damaging your computer!
I will close this topic, if you need it reopened, please send me a PM.
regards, Elise
"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton Follow BleepingComputer on: Facebook | Twitter | Google+