How to remove blackfight/reddie virus? Help appreciated!

system · 2015-05-20T06:08:18.000Z

Hello! I have been infected with a virus that was causing havoc on my computer a week or so back, but with the combined efforts of Malwarebytes and Avast! it was seemingly removed. At least the symtoms. Now I’ve been noticing Avast blocking something lately, which is related to this as sometimes the name of what is blocked is similar to what I thought I had removed. This is the message Avast! relays to me:

URL: http://reddie.net/4141/LighterInit_142669556137233.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

I saw in another post that a step-to-step guide was given, but it was computer specific so I wouldn’t dare try it myself. I would appreciate any and all help you may be able to provide.

Kind regards,

TwinHeadedEagle · 2015-05-20T06:08:53.000Z

Hello,

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

system · 2015-05-20T06:20:18.000Z

Thank you very much. I have scanned now, but I can’t for the life of me find where to attach the files in this message :s I assume I shouldn’t just paste here… : )
I do apologise for the general newbness.

TwinHeadedEagle · 2015-05-20T06:23:12.000Z

Please do not paste reports. In every report, click File → Save As and then save them to your Desktop. Then you can attach them both.

system · 2015-05-20T06:25:17.000Z

I understand as much, sir, but I can’t for the life of me find any sort of attach function on this forum. Again, pardon the newbness.

Nevermind it, not only am I a newb but also blind. Files are attached below.

TwinHeadedEagle · 2015-05-20T06:35:06.000Z

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
emptyalltemp;
bitsadmin /reset /allusers;b
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

system · 2015-05-20T06:49:21.000Z

Attached the zoek results below.

TwinHeadedEagle · 2015-05-20T07:06:32.000Z

Very good. How is your PC behaving now?

system · 2015-05-20T07:10:02.000Z

As fine as before, I shall remain content and hope for no more Avast! messages. They did, admittedly, come sporadically, but since I had such issues the previous week I just wanted to clear out any potential remains of the problem.

Until then, thread - I suppose - can be considered closed : )

Thank you very much for your help!

Announcements