Can't remove malware

Viruses and worms
1

Please help me to fix this…

I inserted a cprrupted usb drive into my laptop and
after that i could see that below 2 urls are invoked at regular intervals and blocked by avast
hxtp://nnh42.name/a/
hxtp://jsh37.net/a/

How do I stop this from happening?
Thanks!

2

hey and welcome to the forum.

please attach your logs otl.mbam,adwclener, aswmbr from this guide.

http://forum.avast.com/index.php?topic=53253.0

a malware expert will help you from there

3

First you will need to wipe the infected USB

4

MCShield is an antimalware program designed to prevent infections transmitted via removable drives. http://mcshield.net/

5

A little picture to help

Download McShield to your desktop and install
It will initially run a scan and show the result as a toaster by the system clock
Then in the control centre select scanner and tick unhide items on flash drives

https://dl.dropbox.com/u/73555776/mcshield%20unhide.JPG

Plug in the drive and McShield will start a scan

Then get the log which will be here :

Start > all programs > MCShield > logs > all scans

And post that

6

Hi,

I tried McShield (corrupt installation), OTL (window disappears), Mbam (can’t download) and adw (exe file doesn’t open) but none of them worked. Only asw worked, for which I have attached the logs.

How do I proceed?

7

try OTL from safe mode…

Essexboy will be back later today :wink:

8

Let me know if OTL fails, it appears they have updated the programme to block OTL

9

Hi,

I tried running OTL from safe mode. It allowed me select the options and copy the text in the custom area, but the window stopped responding after I clicked ‘run scan’.

10

Do you have a USB handy ?

Download the following three programmes to your desktop :

  1. Rufus

For 64bit systems
2. Windows 7 64bit RC
3. Farbar Recovery Scan Tool x64

For 32bit systems
2. Windows 7 RC
3. Farbar Recovery Scan Tool

Insert the USB stick Then run Rufus

https://dl.dropbox.com/u/73555776/rufus.JPG

Select the ISO file on the desktop via the ISO icon.

Press Start Burn

https://dl.dropbox.com/u/73555776/RufusISO.JPG

Then copy FRST to the same USB

http://dl.dropbox.com/u/73555776/frstwintoboot.JPG

Insert the USB into the sick computer and start the computer. First ensuring that the system is set to boot from USB
Note: If you are not sure how to do that follow the instructions Here

When you reboot you will see this although yours will say windows 7.
Click repair my computer

http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7275.jpg

Select your operating system

http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277202.jpg

Select Command prompt

http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277.jpg

At the command prompt type the following :

notepad and press Enter.
The notepad opens. Under File menu select Open.
Select “Computer” and find your flash drive letter and close the notepad.
In the command window type e:\frst64.exe and press Enter (or e:\frst.exe if 32bit)
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.

https://dl.dropbox.com/u/73555776/FRST%20Start%20scan.gif

Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.