ATTENTION NEWLY INFECTED USERS

[Ping]

If you have an infected computer and wish our assistance, start a new topic. Please do the following:

• Describe the symptoms of your infection (Slow computer, pop ups, redirects..etc)
  
  
• : Malwarebytes' Anti-Malware :
  
  
  Please download Malwarebytes' Anti-Malware to your desktop.
  
  
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.
  • When completed, a log will open in Notepad. please copy and paste the log into your next reply
    
    • If you accidently close it, the log file is saved here and will be named like this:
    • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
  
  Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
  Click OK to either and let MBAM proceed with the disinfection process.
  If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
  
  
• OTL scan
  
  Download OTL by Old Timer and save it to your Desktop.
  
  • Double click on OTL.exe to run it.
  • Under Output, ensure that Minimal Output is selected.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    
    • OTListIt.txt <-- Will be opened
    • Extra.txt <-- Will be minimized
  • Please post the contents of these 2 Notepad files in your next reply.

[diver256]

I Agree Some Problems Dont Explain Very Much We Could Do Something Like Read Here Before Post And Write Like Post A Hijackthis Log ect So That We Can Just Fix The Problems Instead Of Asking Them Alot Of The Time Just A Idear XD

[lifetweaker]

Thanks for this thread.

[Noob]

i hope more people will be sastisfied after we members have help them removing their malwares,computer problems

[123zap]

I have a suggestion. Instead of having more than one person helping, do you think that whoever starts helping the user first will be the person who helps them the whole time. Just one user and one helper per topic. Different people work malware problems differently and giving the original helper all of the space to do what he wants would make it more productive.

[Ping]

I think you guys can decide on that. If not, come back and we can discuss it

[azlan96]

but only Kenny94 uses the right technique on most of the malware removal forums.. Other members will just say, Ran MBAM, Run SAS....

[virtu]

In life and everything when you encounter something unknown to you or others you choose the easy way...
@123zap ..it's a good idea.

[Kenny94]

It always best to ask for a Hijackthis log from the start. The frist thing I look for if the user has a anti-virus program installed. Or if the user has Two or more Anti-Virus Programs. Why help a user with no anti-virus program. Then I look at the entries. With newer infections that are out today. I would say Hijackthis is only showing 50 percent of them. But there are clues you can look for. One is, when you see no O2 - Browser Helper Objects and/or O20 - AppInit_DLLs Registry value autorun in a Hijackthis log. It's likely that the user has a variant of the Vundo trojan that hides itself from HijackThis.exe. There is other things to look for as well. I have a Hijackthis Tutorial that is in laymen terms. Feel free to PM me and I'll send your way. If anyone here is interested.

[123zap]

I am in training at geekstogo.com. That is the way they run things there and it works very well. I would plan on doing it like Kenny94 does it right now, taking it step by step and really working with the user.