IMPORTANT - Read This Before Posting For Malware Removal Help

MicroBell · 09-04-2005, 11:03 PM

5 Step Process

DO NOT FIX ANY ENTRIES OR DELETE ANY FILES YOURSELF. DO NOT RUN ANY SPECIALIZED TOOLS THAT YOU SEE BEING USED IN OTHER THREADS WITHOUT DIRECT SUPERVISION FROM ONE OF OUR TRAINED ANALYSTS.

Be advised that running any specialized tools, ON YOUR OWN, not listed in the Self Help Guide or the Important Please Read This Before Posting for Malware Removal Help sticky topic, is done solely at your own risk.

You may end up with a useless system.

A trained Analyst will review your log and provide detailed instructions thereafter.

It is appreciated that the level of infection may not allow you to complete all these steps. Therefore, if for some reason you cannot perform one of the steps, move on to the next step and advise the Analyst accordingly when you post the requested logs.

NOTE: We are aware that users sometimes seek help from several Forums at the same time. Unfortunately, this can cause confusion and actually wastes time and resources - yours, ours and other Volunteers across the community. If you have already posted at another Forum, please advise us, or them, and choose just one.

Please also note:

The intent of this free service performed by volunteers is to help remove malware from your machine, educate you on how it may have happened, and how to prevent that from happening again. To this end, we provide links to articles and tools which should make your visit to the HijackThis Log Help section of TSF a one time event. Please do enjoy the rest of Tech Support Forum as many times as you like!!

It is not our intent to repeatedly remove malware from the same member's machines.

STEP 1

If you have cracked (illegal) software installed, click here.

Next....

If you have more than one AntiVirus installed

While this may seem like greater protection, it can cause problems including slowdowns, system hangs or even crashes. This can happen if both AntiVirus applications attempt to access the same file at the same time. This may cause the applications to interfere with each other, or cause the system to lock up. It can also be a drain on system resources, making a machine run slower than it should.

Therefore, uninstall all but one AntiVirus application using the Add or Remove Programs in the Control Panel before posting your logs. Be sure to leave one up-to-date AntiVirus application installed. If you're unsure about what to do, do nothing, and wait for the advice of the Analyst who helps you.

Next.....

Uninstall Malware from Windows Add/Remove Program Tab

Go to Start > Control Panel > Add / Remove Programs and uninstall any of the following malware/spyware/adware programs if you find them listed.

180 Search Assistant
180Solutions
Active alert
Ad Service
AdTools
AdTools Service
Alexa toolbar
BargainBuddy
Bullseye Networks
CashBack
cosmi
DH
Download Accelerator Plus
EasySearchBar
Elite Sidebar
Elite Toolbar
Freeze Clip Art
GAIN
Gator
Hotbar Outlook Tools
Hotbar Web Tools
HuntBar
ISTbar
ISTSvc
Media Access
Media Gateway
MySearch
MyWay Search Bar
MyWebSearch
NavExcel Search Toolbar
NavHelper
ncase
NetPumper
NewDotNet
Oemji Toolbar
Open Site
P2P Networking
Preview AdService
Search Toolbar (HuntBar/WinTools)
ShopperReports by Hotbar
Sidefind
SideSearch
Slotchbar
Software Update Manager
StarWare
SurfAccuracy
Upspiral Toolbar
TurboDownload
VBouncer
Viewpoint
Viewpoint Manager
Viewpoint Media Player
WareOut
WeatherBug
Web Rebates
Web Search Toolbar (WinTools)
Webhancer
WhenU (any entry)
WeirdOnTheWeb
Windows AdService
Windows ServeAd
WinTools
WinTools Easy Installer
WSEM Update

For a more complete list, please use this resource.

*These are Optional removals but we recommend you remove them as well.

Kazaa
Kontiki
Messenger Plus! (this application installs a "sponsor" program responsible for popup ads.)
WildTangent

*Note* If you're unsure about ANY entry then leave it alone and the Analyst will advise you in the fix later.

Search for Rogue and Suspect Programs

Please visit the following site and REMOVE/UNINSTALL any program you have that is listed on this site.

Spyware Warrior: Rogue/Suspect Anti-Spyware Products & Web Sites

This site has a list of known "Rogue" and "Suspect" programs. These programs cannot be trusted as they either don't do what they say, are poorly designed, or take advantage of the user in an effort to get YOU to spend money on buying their products. Several of these programs actually install "Spyware/Adware" on your system!

Note: Follow the link below to move to the next step.

Go to Step 2 - Click Here

tetonbob · 07-18-2008, 09:31 AM

Move to top.

09-04-2005, 11:03 PM	#1 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,951 OS: Windows XP-Pro SP2	IMPORTANT - Read This Before Posting For Malware Removal Help 5 Step Process DO NOT FIX ANY ENTRIES OR DELETE ANY FILES YOURSELF. DO NOT RUN ANY SPECIALIZED TOOLS THAT YOU SEE BEING USED IN OTHER THREADS WITHOUT DIRECT SUPERVISION FROM ONE OF OUR TRAINED ANALYSTS. Be advised that running any specialized tools, ON YOUR OWN, not listed in the Self Help Guide or the Important Please Read This Before Posting for Malware Removal Help sticky topic, is done solely at your own risk. You may end up with a useless system. A trained Analyst will review your log and provide detailed instructions thereafter. It is appreciated that the level of infection may not allow you to complete all these steps. Therefore, if for some reason you cannot perform one of the steps, move on to the next step and advise the Analyst accordingly when you post the requested logs. NOTE: We are aware that users sometimes seek help from several Forums at the same time. Unfortunately, this can cause confusion and actually wastes time and resources - yours, ours and other Volunteers across the community. If you have already posted at another Forum, please advise us, or them, and choose just one. Please also note: The intent of this free service performed by volunteers is to help remove malware from your machine, educate you on how it may have happened, and how to prevent that from happening again. To this end, we provide links to articles and tools which should make your visit to the HijackThis Log Help section of TSF a one time event. Please do enjoy the rest of Tech Support Forum as many times as you like!! It is not our intent to repeatedly remove malware from the same member's machines. STEP 1 If you have cracked (illegal) software installed, click here. Next.... If you have more than one AntiVirus installed While this may seem like greater protection, it can cause problems including slowdowns, system hangs or even crashes. This can happen if both AntiVirus applications attempt to access the same file at the same time. This may cause the applications to interfere with each other, or cause the system to lock up. It can also be a drain on system resources, making a machine run slower than it should. Therefore, uninstall all but one AntiVirus application using the Add or Remove Programs in the Control Panel before posting your logs. Be sure to leave one up-to-date AntiVirus application installed. If you're unsure about what to do, do nothing, and wait for the advice of the Analyst who helps you. Next..... Uninstall Malware from Windows Add/Remove Program Tab Go to Start > Control Panel > Add / Remove Programs and uninstall any of the following malware/spyware/adware programs if you find them listed. 180 Search Assistant 180Solutions Active alert Ad Service AdTools AdTools Service Alexa toolbar BargainBuddy Bullseye Networks CashBack cosmi DH Download Accelerator Plus EasySearchBar Elite Sidebar Elite Toolbar Freeze Clip Art GAIN Gator Hotbar Outlook Tools Hotbar Web Tools HuntBar ISTbar ISTSvc Media Access Media Gateway MySearch MyWay Search Bar MyWebSearch NavExcel Search Toolbar NavHelper ncase NetPumper NewDotNet Oemji Toolbar Open Site P2P Networking Preview AdService Search Toolbar (HuntBar/WinTools) ShopperReports by Hotbar Sidefind SideSearch Slotchbar Software Update Manager StarWare SurfAccuracy Upspiral Toolbar TurboDownload VBouncer Viewpoint Viewpoint Manager Viewpoint Media Player WareOut WeatherBug Web Rebates Web Search Toolbar (WinTools) Webhancer WhenU (any entry) WeirdOnTheWeb Windows AdService Windows ServeAd WinTools WinTools Easy Installer WSEM Update For a more complete list, please use this resource. *These are Optional removals but we recommend you remove them as well. Kazaa Kontiki Messenger Plus! (this application installs a "sponsor" program responsible for popup ads.) WildTangent *Note* If you're unsure about ANY entry then leave it alone and the Analyst will advise you in the fix later. Search for Rogue and Suspect Programs Please visit the following site and REMOVE/UNINSTALL any program you have that is listed on this site. Spyware Warrior: Rogue/Suspect Anti-Spyware Products & Web Sites This site has a list of known "Rogue" and "Suspect" programs. These programs cannot be trusted as they either don't do what they say, are poorly designed, or take advantage of the user in an effort to get YOU to spend money on buying their products. Several of these programs actually install "Spyware/Adware" on your system! Note: Follow the link below to move to the next step. Go to Step 2 - Click Here

07-18-2008, 09:31 AM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 23,728 OS: 2000 Pro; XP Pro; XP Home	Re: IMPORTANT - Read This Before Posting For Malware Removal Help Move to top. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Our help is voluntary, but this site needs donations to operate. Please consider Donating to the Forum. Please do not ask for help via Private Message. Ask in the forums, so all may gain from the experience.