http://reddie.net/ removal help

Viruses and worms
1

Hi,

I thought I’d removed an infection from my PC with Avast recently but am still getting an infection blocked message each time I boot the machine:

URL: http://reddie.net/4141/LibraryProc_142667285205218.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

Please can you help me get rid of this once and for all?

Having read this instructions on this page https://forum.avast.com/index.php?topic=53253.0 my Farbar & aswMBR logs are attached.

2

hey please also scan with malwarebytes antimalware from that guide also and attach that log.

a amlware expert will help you out when one is online.

3

Hi mikaelrask,

Thanks for your help.

I did run a MAM scan before Farbar & aswMBR but it didn’t detect anything.

I’ve run it again anyway and the log is attached.

4

Hello,

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

5

Thanks argus.

Instructions followed and fixlog attached as requested.

6

How is the situation now?

7

Hi again argus,

Yes, after several successful reboots that seems to have fixed the problem.

Thanks very much for your assistance!

SW

8

Glad we could help. We will delete all used tools.

Download DelFix by Xplode and save it to your desktop.

[*]Run the tool by right click on the
http://www.imgdumper.nl/uploads6/51a5ce45267c1/51a5ce45263de-delfix.png
icon and Run as administrator option.
[*]Make sure that these ones are checked:

[]Remove disinfection tools
[]Purge system restore
[*]Reset system settings

[*]Push Run and wait until the tool completes his work.
All tools we used should be gone. Tool will create an report for you (C:[B]DelFix.txt)

[SIZE=1]The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.