[Gringo_pr]

Hello and Welcome to the forums!

My name is ****** and I'll be glad to help you with your computer problems. HijackThis logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens.

Before we start: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

Somethings to remember while we are working together.

• 1.Please do not run any other tool untill instructed to do so!
  2.Please reply to this thread, do not start another!
  3.Please tell me about any problems that have occurred during the fix.
  4.Please tell me of any other symptoms you may be having as these can help also.
  5.Please try as much as possible not to run anything while executing a fix.

If you follow these instructions, everything should go smoothly.


Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

It may be helpful for you to print out or take a copy of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

:run combofix:

• Please visit this webpage for download links, and instructions for running the tool:
  
  http://www.bleepingcomputer.com/combofix/how-to-use-combofix
  
  Please ensure you read this guide carefully and install the Recovery Console first.
  
  The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode.
  This allows us to more easily help you should your computer have a problem after an attempted removal of malware.
  It is a simple procedure that will only take a few moments of your time.
  
  Once installed, you should see a blue screen prompt that says:
  
  • The Recovery Console was successfully installed.
  Please continue as follows:
  
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Click Yes to allow ComboFix to continue scanning for malware.
  
  When the tool is finished, it will produce a report for you.
  
  Please include the report in your next post:
  
  C:\ComboFix.txt

:information and logs:

• In your next post I need the following
  
  
  1. log from combofix
  2. let me know of any problems you may have had
  3. how is the computer doing now?

******

 

[Gringo_pr]

Hello jcanney

It may be helpful for you to print out or take a copy of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.


Download this version of combofix

Please download ComboFix from Here or Here to your Desktop.

**Note:**In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**

1. If you are using Firefox, make sure that your download settings are as follows:
   • Tools->Options->Main tab
   • Set to "Always ask me where to Save the files".
2. During the download, rename Combofix to Combo-Fix as follows:
   
   
   
   
   
   
   
3. It is important you rename Combofix during the download, but not after.
4. Please do not rename Combofix to other names, but only to the one indicated.
5. Close any open browsers.
6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
   
   • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
   • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
   • Close any open browsers.
7. Double click on combo-Fix.exe & follow the prompts.
8. When finished, it will produce a report for you.
9. Please post the "C:\Combo-Fix.txt" for further review.

**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

:information and logs:

• In your next post I need the following
  
  1. log from combofix
  2. let me know of any problems you may have had
  3. How is the computer doing now?

******

 

[Gringo_pr]

Hello jcanney

It may be helpful for you to print out or take a copy of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.


:Run CFScript:

Open Notepad and copy/paste the text in the box into the window:

Driver:: 
Uagidems

Save it to your desktop as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe

This will let ComboFix run again.
Restart if you have to.
Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

NOTE**

• When ComboFix finishes running, the ComboFix log will open along with a message box--do not be alarmed. With the above script, ComboFix will upload files to submit for analysis.
  
• Ensure you are connected to the internet and click OK on the message box.

extra combofix report

I need to see one of the extra reports combofix makes

• push the "windows key" + "R" (between the "Ctrl" button and "Alt" Button)
• please copy and past the following into the box

C:\Qoobox\Add-Remove Programs.txt

• click ok
• copy and paste the report into this topic for me to review

:information and logs:

• In your next post I need the following
  
  1. log from combofix
  2. extra report from combofix
  3. let me know of any problems you may have had
  4. How is the computer doing now?

******

 

[Gringo_pr]

Hello

3 day day bump


It has been more than three days since my last post.

• do you still need help with this?
• do you need more time?
• are you having problems following my instructions?
  [*]if after 48hrs you have not replied to this thread then it will have to be closed!

******