1) tdsskiller (which didn't seem to FULLY work because...
2) anti virus scan (msse had me use msse 'offline' mode which found quite a few 'alureon' entries)
3) mbam (which found a couple of pum. (sp?) '.startmenu.' entries
4) combofix (which I GUESS (and please, PLEASE help me out on this one) took care of the rest of the 'aftermath' (missing start menu shortcuts, etc (i don't believe the trojan actually ever 'hid' any of my files (i've heard some strains do that, but i seem to see everything on my desktop and in my downloads folder and documents folder (etc) i'm not missing anything... am i?
5) otl (which i can't seem to 'login' to the analyzer... i guess that's normal?
i can post my otl log if needed (sticky/warning didn't say anything about not posting *otl* logs... but just to be safe...
edit: 6) (or 4a) *running unhide.exe just as a precaution*
edit #2: thought i'd mention, system restore couldn't successfully complete (AFTER running tdsskiller (but not BEFORE running msse 'offline' from the disc i burned (which, like i said, seemed to take care of the root problem (main trojan removal process)... IF i ever get my system back to normal... should i just go ahead and run system restore to ONE day before i got the trojan (luckily i had installed some software before i got the trojan)... would that get EVERYTHING back to normal (AND remove all the bad registry entries??? :\
edit #3: i DO plan on running ccleaner and disk cleanup (as well as defrag (after scandisk/chkdsk, of course), but ABSOLUTELY not until i know everything on my system is back to normal!!
edit #4: haven't had a reply yet... but... i'm just wondering... is my system FUBAR... will it ever be the same (look the same, act the same, run the same ('speed'-wise)... java updated and i got an error (could be coincidence (just a bad install (download/file/installer), could not... right?)? :'(
ugh... sry for all the edits guys... just worried about my rig
ran hijackthis (v2.0.4 (final/stable) and got THIS: error message:
Edited by f0xh0und, 11 December 2011 - 11:53 PM.