This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Hope this is simple!

8 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from August 14, 2013, 9:28 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

ProblemBoy
August 12, 2013, 4:23 PM UTC
Hi nunped,
When AVG ran this morning it showed no infections.

https://www.virustotal.com/en/file/f499 ... 376323677/

RK did not ask me to close any programs.

RogueKiller V8.6.5 [Aug 5 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User : Anthony [Admin rights]
Mode : Scan -- Date : 08/12/2013 12:17:58
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 5 ¤¤¤
[DNS] HKLM\[...]\CS001\[...]\{41723E52-D71A-449A-BBC4-9CFD4F32058C} : NameServer (93.188.163.70,93.188.166.9) -> FOUND
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> FOUND
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> FOUND
[HJ] HKCU\[...]\Internet Settings : WarnOnHTTPSToHTTPRedirect (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK1032GSX +++++
--- User ---
[MBR] 15cabf2545f3d1854e61d255acc08471
[BSP] ee185c43079e04784493ce565938567a : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 95142 Mo
1 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 194852385 | Size: 251 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_S_08122013_121758.txt >>
nunped MRU Honors Grad Emeritus
August 12, 2013, 10:03 PM UTC
Hi ProblemBoy,

When AVG ran this morning it showed no infections.

Good to know :)

RogueKiller scan was clean.

It came to my attention that my link for TDSSKiller was outdated.
So, I'll ask you to:
  • Delete your copy of tdsskiller.exe
  • Delete the log files at C:\
  • Download a new version from here.
  • Double click TDSSKiller.exe to run it.
  • Click the Start Scan button. Do not use the computer during the scan!
  • If the scan completes with nothing found, click Close to exit.
  • If malicious objects are found, they will show in the "Scan results - Select action for found objects" and offer 3 options.
    • Ensure SKIP is selected... DO NOT attempt to FIX anything yet!
    • Now click on Report to open the log file created by TDSSKiller in your root directory C:\
  • A log file named TDSSKiller_version_dd.mm.yyyy_hh.mm.ss_log.txt will be created and saved to the root directory. (usually Local Disk C:).
  • Copy and paste the contents of that file in your next reply.
ProblemBoy
August 13, 2013, 3:44 AM UTC
Hi nunped,
Are we there yet? TDSSKiller nothing to be killed! Thank you very much. :)
nunped MRU Honors Grad Emeritus
August 13, 2013, 9:24 AM UTC
Hi ProblemBoy,

Yes, I think you are good to go :) Your computer appears clean from malware.
Some clean-up steps:

Clean up with OTL
  • Double-click OTL.exe to run it.
  • This will remove all the tools we used to clean your pc.
  • On the OTL main screen, press the CleanUp! button
  • Say Yes to the prompt and then allow the program to reboot your computer.


Create a new, clean System Restore point
  • Create a new, clean System Restore point which you can use in case of future system problems:
  • Press Start >> All Programs >> Accessories >>System Tools >> System Restore
  • Select Create a restore point, then Next, type a name like All Clean then press the Create button and once it's done press Close
  • Now remove old, infected System Restore points:
  • Next click Start >> Run and type cleanmgr in the box and press OK
  • Ensure the boxes for Recycle Bin, Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
  • Select the More Options tab, under System Restore press Clean up... and say Yes to the prompt
  • Press OK and Yes to confirm


Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.


If your computer is running slowly after your clean up, please read.


Please reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Safe surfing! ;)
ProblemBoy
August 13, 2013, 7:17 PM UTC
Hi nunped,
Completed the cleanup. Guess we're good to go. Thanks again, you did a great job.
Cypher Admin/Teacher
August 14, 2013, 9:28 AM UTC

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.