Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding.
Please ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this
webpage would not be available when you're carrying out the fix.
IT IS IMPORTANT THAT YOU DON'T MISS A STEP & PERFORM EVERYTHING IN THE RIGHT ORDER.
----------------------------------------
I don't see the Jotti report. Can you please repost it or let me know what it found
I also noticed a crack program in your log. Please note that these sites pose serious security risks for your system and are known
to download malicious programs without your knowledge
----------------------------------------
Please download
SmitfraudFix (by
S!Ri)
Extract the content (a folder named
SmitfraudFix) to your Desktop.
Open the
SmitfraudFix folder and double-click
smitfraudfix.cmd
Select option
#1 -
Search by typing
1 and press
"Enter"
and a text file will appear which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
IMPORTANT: Do NOT run option #2 OR any other option until you are directed to do so!
----------------------------------------
EWIDO
[b][color=red]Please re-configure Ewido, making sure that under RECOMMENDED ACTIONS, the QUARANTINE button is checked, and the APPLY ALL ACTIONS
is checked after the scan
- Run Ewido with it's updated definitions: (...it's important that all windows must be closed)
This scan can take quite a while to run, so be prepared.
- Click Scanner
- Click on the Scan tab
- Click Complete System Scan to begin scanning.
- When the scan is complete click Recommended Action and change it to Quarantine.
- Then click Apply all actions.
Once finished, click the
Save report button, then click
Save Report As and save it to your desktop.
----------------------------------------
Establish an internet connection & perform an online scan with Internet Explorer at
Kaspersky Online Scanner
Answer Yes, when prompted to install an ActiveX component.
- The program will then begin downloading the latest definition files.
- Once the files have been downloaded click on NEXT
- Locate the Scan Settings button & configure to:
- Scan using the following Anti-Virus database:
- Scan Options:
- Scan Archives
- Scan Mail Bases
- Click OK & have it scan My Computer
- Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect.
We only require a report from it.
- Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
* Turn off the real time scanner of any existing antivirus program while performing the online scan
----------------------------------------
FOLLOW-UP
Please return and post these items:
Jotti report - if available
SmitFraud log
Ewido log
KAspersky scan
A new HJT log run in Normal Mode
Please note: In order to properly see what is on your system, all HJT logs must be run in the normal mode