Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Performance Maximizer Profitizeme; AVE.exe


  • This topic is locked This topic is locked
2 replies to this topic

#1 Gene.CPA

Gene.CPA

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:30 AM

Posted 18 May 2010 - 11:58 AM

Though not a PC noob, this is my first post to Bleeping Computer, and I'm in a world of hurt...

In short, I got hijacked by AVE.exe (fake antivirus program) and Performance Maximizer Profitizeme a couple weeks back and can't seem to permanently shake it with my existing tool kit of AVG Free and Spybot S&D.

More specifically:

I'm current with all Windows, antivirus, and anti-malware updates.
My machine configuration (courtesy of CPUZ) is available now in TXT format if needed.
My AVG Resident Shield Detection List is available now in TXT format if needed.
When working, IE 8.0 is being redirected to fake-looking search sites.
IE is frequently disabled. To regain internet connectivity, I have to restore IE's default settings (Tools; Internet Options; Advanced; Reset Internet Explorer settings).
My AVG taskbar icon has been deleted/de-activated.
I receive error messages when attempting to install Windows Defender.
I am finding up to four instances of iexplore.exe running per Windows Task Manager that I did NOT initiate. If I manually End Process, they re-initiate within 15 seconds.
After installing and running AdAware this morning, I received a BSOD for Memory Management: 0x0000001A (0x00000780 0xC065B558 0x8260F7E0 0x000004C0)

This desktop is my primary PC. Your time and assistance in its liberation is greatly appreciated!

Kind Regards,
Gene

P.S. I'm in the process of backing-up my data and will post requested log files shortly.

Attached Files


Edited by Gene.CPA, 18 May 2010 - 12:29 PM.


BC AdBot (Login to Remove)

 


#2 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:30 AM

Posted 20 May 2010 - 12:28 AM

Hi Gene,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
  • When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt
  • Save both reports to your desktop. Post them back to your topic.

  • Download GMER here by clicking download exe -button and then saving it your desktop:
    • Double-click .exe that you downloaded
    • Click rootkit-tab, uncheck files option and then click scan.
    • Don't check
      Show All
      box while scanning in progress!
    • When scanning is ready, click Copy.
    • This copies log to clipboard
    • Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

    Microsoft Windows Insider MVP 2016-2017

    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006
    unite_blue.png

    Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


    #3 Blade81

    Blade81

      Bleepin' Rocker


    • Malware Response Team
    • 6,465 posts
    • OFFLINE
    •  
    • Gender:Male
    • Location:Finland
    • Local time:08:30 AM

    Posted 28 May 2010 - 01:04 AM

    Due to inactivity, this thread will now be closed. If you need this topic reopened, please contact a Staff member. Include the address of this thread in your request. This applies only to the original topic starter. Should you have a new issue, please start a New Topic.

    Microsoft Windows Insider MVP 2016-2017

    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006
    unite_blue.png

    Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.





    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users