Bendek 00y

[Bendek]

1. In a text files and maybe on the forum

2. Download HijackThis
Download HiJackThis v2.0.2 from here
NOTE: Please uninstall the older version of HiJackThis first.

• Save HJTInstall.exe to your desktop
• Double click on the HJTInstall.exe icon on your desktop
• By default it will install to C:\Program Files\Trend Micro\HijackThis
• Click on Install
• It will create a HiJackThis icon on the desktop
• Once installed, it will launch HiJackThis
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad
• Click on Edit > Select All then click on Edit > Copy to copy the entire contents of the log
• Come back here to this thread and paste the log in your next reply

DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.


3.Your version of HijackThis is out of date & needs to be updated. Download HiJackThis v2.0.2 from here
NOTE: If you have an older version of HiJackThis, please uninstall first.

• Save HJTInstall.exe to your desktop
• Double click on the HJTInstall.exe icon on your desktop
• By default it will install to C:\Program Files\Trend Micro\HijackThis
• Click on Install
• It will create a HiJackThis icon on the desktop
• Once installed, it will launch HiJackThis
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad
• Click on Edit > Select All then click on Edit > Copy to copy the entire contents of the log
• Come back here to this thread and paste the log in your next reply.

DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.Move HiJackThis
Your copy of HijackThis needs to be in a folder of it's own in the root directory, not the Desktop . When HJT fixes anything, it makes backups of the original files in the folder it is in. For this reason it cannot be run from a Zip file or from Temporary folders because the backups will be deleted. Having the backups could be VITAL to restoring your system if something went wrong in the FIX process!

• Go to your My Documents folder, right-click and select New > Folder then name the folder HJT.
• Copy and paste HijackThis.exe to the new folder.

4. Kaspersky online scan.

Please go to Kaspersky website and perform an online antivirus scan.

1. Read through the requirements and privacy statement and click on Accept button.
2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
3. When the downloads have finished, click on Settings.
4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
   Spyware, Adware, Dialers, and other potentially dangerous programs
   Archives
   Mail databases
5. Click on My Computer under Scan.
6. Once the scan is complete, it will display the results. Click on View Scan Report.
7. You will see a list of infected items there. Click on Save Report As....
8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
9. Please post this log in your next reply.

5. Malwarebytes' Anti-Malware
Download Malwarebytes' Anti-Malware here & save to your desktop.

• Double-click mbam-setup.exe & follow the prompts to install the program
• At the end, be sure a checkmark is placed next to:
  Update Malwarebytes' Anti-Malware
  Launch Malwarebytes' Anti-Malware
• Then click Finish
• If an update is found, it will download and install the latest version
• Once the program has loaded, select Perform full scan, then click Scan
• When the scan is complete, click OK, then Show Results to view the results
• Check all items except items in the C:\System Volume Information folder... then click on Remove Selected
• When completed, a log will open in Notepad. Please copy & paste the log back into your next reply
  Note:
• The log is automatically saved by Malwarebytes' Anti-Malware & can be viewed by clicking the Logs tab

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either & let Malwarebytes' Anti-Malware proceed with the disinfection process.
If asked to restart the computer, please do so. Failure to reboot will prevent MBAM from removing all the malware.
If you receive an (Error Loading) error on reboot please reboot a second time . It is normal for this error to occur once & does not need to be reported unless it returns on future reboots.
I decided to do this exercise in two stages- I wait for ur reply and i send next part

[peku006]

Hi Bendek

1.Good

2. Good

3. If the poster was running HJT directly from a zipped folder, how would you instruct the poster to correct the situation ?

4. You appear to have missed answered a part of this question : How would you decide if the user needs to run an online antivirus scan?
Can you think of some possible scenarios why we ask a user to perform an online scan?

5. You appear to have missed answered a part of this question : When would you tell a user to run Malwarebytes' Anti-Malware ?
Under what circumstances would you instruct downloading and running MBAM?