Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Roguekiller


  • Please log in to reply
13 replies to this topic

#1 endless_nameless

endless_nameless

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 31 March 2014 - 12:17 PM

I'm trying to run roguekiller but it always gets stuck on ''searching for policy hijacks'',

I've tried 3 times, always with the same result. 

I'm trying to use it because my laptop has been infected with cryptorbit.

Is there another program similar to roguekiller that I can use?

Thanks.



BC AdBot (Login to Remove)

 


m

#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:00 AM

Posted 31 March 2014 - 01:17 PM

Is there another program similar to roguekiller that I can use?

RKill - What it does and What it Doesn't - A brief introduction to the program
RKill download links
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 endless_nameless

endless_nameless
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 31 March 2014 - 01:48 PM

It says to use an anti malware or anti virus program after running Rkill

Which one do you recommend?



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:00 AM

Posted 31 March 2014 - 01:51 PM

Malwarebytes Anti-Malware

How to scan with Malwarebytes Anti-Malware 2.0
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 endless_nameless

endless_nameless
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 31 March 2014 - 01:53 PM

I will use those two programs.

Thanks :)



#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:00 AM

Posted 31 March 2014 - 01:55 PM

You're welcome.

If you need individual assistance with malware infection, you can start a new topic in the Am I infected? What do I do? forum or follow the instructions provided in the Malware Removal and Log Section Preparation Guide starting at Step 6.
  • If you cannot complete a step, then skip it and continue with the next.
  • In Step 6 there are instructions for downloading and running DDS which will create two logs. (Note: Windows 8.1 Users will not be able run DDS and create a log)
When you have done that, post your logs in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 endless_nameless

endless_nameless
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 31 March 2014 - 01:59 PM

Just one final question.

Should I run both programs in safe mode?



#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:00 AM

Posted 31 March 2014 - 04:00 PM

No.

Scanning with Malwarebytes Anti-Malware in safe or normal mode will work but removal functions are not as powerful in safe mode. Why? MBAM is designed to be at full power when malware is running so safe mode is not necessary when using it. In fact, MBAM loses some effectiveness for detection and removal when used in safe mode because the program includes a special driver which does not work in safe mode. Further, scanning in safe mode prevents some types of malware from running so it may be missed during the detection process. Additionally, there are various types of malware infections which target the safeboot keyset so booting into safe mode is not always possible. For optimal removal, normal mode is recommended so it does not limit the abilities of MBAM. Doing a safe mode scan should only be done when a regular mode scan fails or you cannot boot up normally. If that is the case, after completing a safe mode scan, reboot normally, update the database definitions through the program's interface (preferable method) and try rescanning again.

BTW, Do not reboot your computer after running RKill until you complete the scan with Malwarebytes.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 endless_nameless

endless_nameless
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 31 March 2014 - 04:07 PM

Got it 

Thanks again for everything :)



#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:00 AM

Posted 31 March 2014 - 04:09 PM

You're welcome and good luck.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 endless_nameless

endless_nameless
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 01 April 2014 - 11:24 AM

Hi, I ran both programs.
Malwarebytes quarantined a lot of trojan ransom viruses.
Then it blocked a couple of times windows32patch or something like that.
 
Today when I turned on my computer from hibernation a realplayer update appeared on my screen.
I clicked to update and avast blocked the site.
Now every 5 seconds Avast is letting me know that it has blocked that harmful webpage or file.
It keeps showing the following:
 
Avast webshield has blocked a harmful webpage or file.
Object: hxxp://colombus.45.com/online/15
Infection: URL:mal
Proccess: C:\windows\system\svchost.exe

#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:00 AM

Posted 01 April 2014 - 03:14 PM


I suggest you start a new topic in the Am I infected? What do I do? forum
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#13 endless_nameless

endless_nameless
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:05:00 AM

Posted 02 April 2014 - 12:12 AM

Got the black screen of death, so just went ahead and did a system recovery.

Is working now :D



#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:00 AM

Posted 02 April 2014 - 06:55 AM

Sometimes doing that that works too.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users