My computer is infectec with the virus: Strong Malware Defender.
Avast find nothing infectec???
http://forum.avast.com/index.php?topic=53253.0
read this and follow the instructions… and essexboy will come to your help 
Hi akama1 and thg,
The preferred removal is to meticulously follow up the instructions and guidelines from essexboy. Until he appears, do not do anything yet, in the mean time you could read this as general information here: http://www.bleepingcomputer.com/virus-removal/remove-strong-malware-defender
polonus
Hi thg,
If you post the logs I will be more than happy to look them over.
Are you still with us?
I have now trying this guide: http://www.bleepingcomputer.com/virus-removal/remove-strong-malware-defender
I have do all thing until item number 23. When I try to delete the HOSTS file, it fails! It says that I not have the right Administator rights, but I’m logged in as Administrator and I have run the “hosts-perm.bat” in item number 22 that sould give me rights to delete the file, but i don’t work?
Please help? Thank you!
hey i suggest you wait for essexbox so he could help you out here. in the mean will you could try malwarebytes antimalware and see if that could solve your problem. as suggested in the remove instructions from the bleepingcomputer page.
http://filehippo.com/download_malwarebytes_anti_malware/
download, install, update and do a scan don’t forget to remove what it finds. A system reboot might be needed.
good luck and let us know on the progress.
This Malwarebytes Anti-Malware program are allready a item in the guide (number 10-21) and I have allready downloaded this, installed, updated, scanned and removed. But after that I can’t delete the HOSTS file descriped in item 23 in the guide???
- You can also follow jeffce’s advice…!!
- Neither essexboy nor jeffce can do anything without your logs.
How do I make a log?
Hi,
Please follow the instructions found here >> http://forum.avast.com/index.php?topic=53253.0
I have attached my logfiles from Malwarebytes Anti-Malware, OTL and aswMBR!
Must I olso run RogueKiller and Farbar Service Scanner???
Must I olso run RogueKiller and Farbar Service Scanner???not yet....wait for instructions
I think you may have sett a new record…possible the longest / most infected MBAM log i have seen ;D
@Pondus
I think you may have sett a new record.......possible the longest / most infected MBAM log i have seen:D I think the worst one I have seen so far had 20,000+ infections. I had to look at is twice to make sure I was reading it right...so this one is not so bad. :D
Hi thg,
These scans were ran just fine thank you. While I am reviewing them please do the following…
Download CKScanner by askey127 from Here & save it to your Desktop.
[*] Right-click and Run as Administrator CKScanner.exe then click Search For Files
[*] When the cursor hourglass disappears, click Save List To File
[*] A message box will verify the file saved
[*] Double-click the CKFiles.txt icon on your desktop then copy/paste the contents in your next reply
Download Combofix from either of the links below, and save it to your desktop.
Link 1
Link 2
Note: It is important that it is saved directly to your desktop
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
Right-Click and Run as Administrator on ComboFix.exe & follow the prompts.
When finished, it will produce a report for you.
[*]Please post the C:\ComboFix.txt for further review.
In your next reply please post the logs made by ckscanner and ComboFix.
CKScanner - Additional Security Risks - These are not necessarily bad
scanner sequence 3.RP.11.UTAAWF
----- EOF -----
Hi thg,
[*]Please open Notepad (Start → Run → type notepad in the Open field → OK) and copy and paste the text present inside the code box below:
ClearJavaCache::
DirLook::
c:\programdata\SMHKD
c:\programdata\f38924
Folder::
c:\users\RLA\AppData\Roaming\GetRightToGo
c:\windows\5B210B8AB66E4702B44D0D6F388D29EB.TMP
c:\program files (x86)\GridinSoft Trojan Killer
[*]Save this as CFScript.txt and change the “Save as type” to “All Files” and place it on your desktop.
http://img.photobucket.com/albums/v706/ried7/CFScriptB-4.gif
[*]Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
[*]Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
[*]ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
[*]When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix’s window while it is running. That may cause it to stall.
Attached the log from ComboFix
Hi,
[*]Please open Notepad (Start → Run → type notepad in the Open field → OK) and copy and paste the text present inside the code box below:
Folder::
c:\programdata\SMHKD
[list]
[*]Save this as CFScript.txt and change the “Save as type” to “All Files” and place it on your desktop.
http://img.photobucket.com/albums/v706/ried7/CFScriptB-4.gif
[*]Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
[*]Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
[*]ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
[*]When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix’s window while it is running. That may cause it to stall.
Malwarebytes
I see that you have Malwarebytes already on your computer. Please open Malwarebytes, update it and then run a Quick Scan. Save the log that is created for your next reply.
ESET Online Scanner
I’d like us to scan your machine with ESET Online Scan
Note: It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don’t go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs.
As a Vista/Win7 user you will need to right click your browser icon and select “Run as Administrator” in order to run this scan.
[]Do not use this instance of your browser for anything besides doing this scan
[]When the scan is complete and the results saved, close that instance of your browser
[*]Open a new one the usual way and post the results in this topic.
[]Right-click and Run as Administartor on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
[]Click the
http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetOnline.png
button.
[]For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)[list=1]
[*]Click on
http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetSmartInstall.png
to download the ESET Smart Installer. Save it to your desktop.
[]Double click on the
http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetSmartInstallDesktopIcon.png
icon on your desktop.
[*]Check
http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetAcceptTerms.png
[*]Click the Start button.
[]Accept any security warnings from your browser.
[]Check
http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetScanArchives.png
[*]Make sure that the option “Remove found threats” is Unchecked
[*]Push the Start button.
[]ESET will then download updates for itself, install itself, and begin
scanning your computer. Please be patient as this can take some time.
[]When the scan completes, push
http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetListThreats.png
[*]Push
http://billy-oneal.com/Canned%20Speeches/speechimages/eset/esetExport.png
, and save the file to your desktop using a unique name, such as
ESETScan. Include the contents of this report in your next reply.
[*]Push the Back button.
[*]Push Finish
http://www.eset.com/onlinescan/
In your next reply please post the logs made by ComboFix, Malwarebytes and ESET online scanner.
No log from Malwarebytes and ESET OnlineScan because it says no infected files!
The log from ComboFix is not possible to upload, because it says that I could upload more files here???
@ thg,
I realize that you are not able to PM jeffce, so I PM’d him for you to respond to you.
Did you try to upload the files one at a time?