Trojans, malware...Seriously infected I think...

Viruses and worms
21

Help is on the way, please be patient.

22

alright alright, good to hear. Im siiting here in front of the computer freaking out lol and it makes me sad that I can’t do anything on my own!

I’ll be patient!

:wink:

23

Hi first you must disable McAfee as that is blocking you from downloading OTL

So try that first

If it still fails then run the following programme and let me know of the problem with McAfee

[*] Download RogueKiller and save it on your desktop.
[*]Quit all programs
[*] Start RogueKiller.exe.
[*] Wait until Prescan has finished …
[*] Click on Scan

http://i1224.photobucket.com/albums/ee362/Essexboy3/RogueKiller/RGKRScan.png

[*]Wait for the end of the scan.
[*] The report has been created on the desktop.
[*] Click on the Delete button.

http://i1224.photobucket.com/albums/ee362/Essexboy3/RogueKiller/RGKRDelete.png

[*]The report has been created on the desktop.

[*]Next click on the ShortcutsFix

http://i1224.photobucket.com/albums/ee362/Essexboy3/RogueKiller/RGKRShortcutsFix.png

[*]The report has been created on the desktop.

Please post: All RKreport.txt text files located on your desktop.

24

I downloaded OTL, but when I double click that’s when it doesn’t work…and McAfee…is that other name for the antivirus?

Thanks for your help!

25

Sorry I meant Kaspersky :-[

26

No problem!! It didn’t work…so now I’m using RogueKiller…it’s scanning now…

27

I would prefer an OTL scan as that looks where others do not

Could you temporarily disable Kaspersky whilst it is running ? http://support.kaspersky.com/kav2012/settings/protection?qid=208284980

28

I tried running OTL with Kaspersky disabled but it still doesn’t work…It gives me that kind of error wheere you can send a report if you want or something…

The roguekiller reports are attached…

What do I do with OTL?

29

OK that has given me a feel for it

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

30

hi again, I downloaded ComboFix from the first link, it didn’t work, so I downloaded from the 2nd link…the name of the file then was ComboFix (1) and I ran it…it was working. but then while it was doing it’s job, it closed my chrome window and then said that the file couldnt be named ComboFix(1)…after that there was a “ComboFix” in the desktop.

no logs on C:\

what shall I do?

31

Delete both copies of combofix from your desktop

Then download a fresh copy please

32

Ok im donwloading it and will now run it.

33

My computer is really really slow…im writing from another one…the google chrome was so slow…and basically seems like ComboFix has crashed, it’s exactly like it is in the image below, unless the loading bar which is a little bit behind…

And I can’t even run ctrl-alt-del…

Do I turn off the computer on the button?

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

34

Well, waited and everything seems to be back to normal. it did the HIV-Backup thing…Still running…

35

Sorry about the multiple posts :-[ but ComboFix finished…but the thing is I can’t find any log and now appeared a blue window that loos like a command line ??? … What am I doing wrong!!! :confused:

the only thing I see related to ComboFix in C:\ is a computer screen named ComboFix and something called QooBox

36

Has the box disappeared now … Did it say preparing log ?

How is the computer running now ?

Could you post a screenshot of the Qoobox/quarantine folder

37

1-the box closed but i dont think it said preparing log.

2-Pretty slow, took ages to open “My Computer”…I always thought that because my pc is old, it was slow,but perhaps it could be the virus…

3- That’s inside the Qoobox, everything is empty unless the log/txt file which says “-------- 2012-08-17 - 16:15:09 -------------” nothing else

http://i.imgur.com/b89wI.jpg

38

OK lets do something a tad severe…

Download a fresh copy of Kaspersky
Disconnect from the internet
Ensure that you have your Kaspersky licence
Uninstall Kaspersky

Run OTL
Run Combofix

Reinstall Kaspersky and post the logs

39

Hey, Alright so I unninstalled Kaspersky, haven’t reinstalled it again. Tried to run OTL still doesnt work…

Ran ComboFix, it worked!

Log attached.

40

Re-install Kaspersky now.

How is the computer behaving ?

You have Babylon on your system so lets remove that next

Download AdwCleaner from here to your desktop
Run AdwCleaner and select Delete

https://dl.dropbox.com/u/73555776/AdwCleaner.GIF

Once done it will ask to reboot, allow this
On reboot a log will be produced please attach that