malsign.generic.DE7

Viruses and worms
1

CAN SOMEONE TELL ME HOW TO DEAL WITH THIS >:( >:(

2

no need to shout. http://email.about.com/od/netiquettetips/qt/Writing-In-All-Caps-Is-Like-Shouting.htm

what program is doing that detection?

follow instructions here. https://forum.avast.com/index.php?topic=53253.0
attach Malwarebytes and OTL logs

make sure logs are saved as ANSI and not Unicode

3

hi sorry dident realise caps was on the program is Avast! Free Antivirus 9.0.2013

4

hi sorry i have been away all day here is the aswMBR file i ran it in safe mode i can nolonger get my avast to run when i click it it wont open will run the otl next alsow when i go to system restore all i get is a blank white page

5
i can nolonger get avast to run when i click it it wont open
do you have AVG and avast installed? ..... as this (MalSign.Generic.DE7) is a AVG detection for some adware/browser crap
hi sorry i have been away all day here is the aswMBR file
we need [b]Malwarebytes[/b] and [b]OTL[/b] logs
6

yes i did have avg for a wile and i dident like it so i reverted back to avast but now it wont run guess if i get this sorted ive learned my lesson and wont change again otl att and malwarebytes logt to follow

7

see instructions, run AVG removal tool and reboot. http://www.avast.com/en-eu/faq.php?article=AVKB11

does avast run now?

malware expets are notified and will check logs when online…

8

Hi,

Posted OTL log does not show the active malware. Looks a like that MBAM has got this. Let’s remove some leftovers and preform the additional check …

Please download zoek by smeenk (
http://www.mcshield.net/personal/magna86/Images/Zoek_icon.png
) from here or here and save it to your Desktop.
Unpack the archive…

[*]Close any open browsers
[*] Temporarily disable your AntiVirus program. (If necessary)
If you are unsure how to do this please read this or this Instruction.

[*]Double click on zoek.exe to run the tool .
Please wait while the tool does not start…

[*]Copy the text present inside the code box below and paste it into the large window in the zoek tool:


Uninstall-List;
C:\WINDOWS\jumpshot.com;vs
{95B7759C-8C7F-4BF1-B163-73684A933233};c
C:\WINDOWS\System32\dllcache\*.tmp;f
C:\WINDOWS\*.tmp;f
C:\WINDOWS\System32\*.tmp;f 
AutoClean;

[*] Click on
http://www.mcshield.net/personal/magna86/Images/Run%20Script%20by%20zoek.png
button.
Please wait until a logreport will open (this can be after reboot)

[*]Save notepad to your Desktop and attach here zoek-results.log
Note: It will also create a log in the C:\ directory named “zoek-results.log”

9

zoek file as requested since i ran zoek i uninstalled avast and then reinstalled it now it opens i ran a quick scan it found nothing now i am running a full deep scan ill let you know if it finds anything thanks to all trying to help me with this i much apreciate it

10

Hi,

No need for pointless scans as this is PUP related and zoekscript shall remove it all.

Zoek has remove a lot of junk… and now you’re need to run this zoek script. Wait for tool to ask for reboot and then post me the fresh zoek logreprot.

ResetHosts;
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions];r
"avg@toolbar"=-;r
EmptyCLSID;
C:\Documents and Settings\All Users\Application Data\AVG Nation toolbar;fs
EmptyFoldersCheck;Delete
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes;r
{b167b83b-348e-4f8a-a00d-693f28ede787} Private Search Url=-;r
AutoClean;
ipconfig /flushdns >> %temp%\log.txt;b
Reboot;
11

second scan results

12

hi magna86 just wondering if you had a chance to look at the second zoek scan results did you see anything is all well or is there anything else i should do thanks to you and pondus :wink: for your help :wink:

13

Thank you for bumping the thread. Somehow, I’ve missed your post.

Aye, the latest zoek log looks fine. Is all well now with computer? I think we do not have to do any additional checks …

14

no prob thanks magna86 yes all looks ok now hopefully its sorted have a nice weekend :slight_smile: :slight_smile:

15

Then, let’s remove used tools here.
• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.