Support Forums

Hello support forums,
I think I am infected and I was recommended to come here. Here is my hjt log:

Just a little bump for my friend. I tried to assist him, but I know you guys would so a better job.

Is your PC still working normally?

Yes its still Functioning well.

Then you haven't virus on your pc..

(03-28-2011, 03:11 PM)h4yr0 Wrote: [ -> ]Then you haven't virus on your pc..

That is so ignorant for you to say. Considering just by this phrase you probably didn't read the op. Please next time, don't even post.

Though there has to be something wrong with it, my AVG Detected 6 Trojans and a virus?

(03-28-2011, 04:13 PM)Veran Wrote: [ -> ]Though there has to be something wrong with it, my AVG Detected 6 Trojans and a virus?

Don't listen to nobody without a badge with the text HJT or some one with a lot of rep and a good amount of posts.

Greetings,


In return for this service, I propose to you two conditions:

1. You are not to create any new threads regarding the similar topic as it will waste another helper's time.
   
2. You are not to install any new software in your system, as it may hinder our process thus making this futile.

In accordance to my terms, I also ask of you six things, stated below:

1. You are not to modify the logs in any way. Failure to do so will instantly deprive you of this service.
   
2. You are to paste each log separately at PasteBin as it is. That is correct, no syntax highlighting, no editing - just the log purely. Post back the links for each log. You shall not hide them under spoiler codes.
   
3. You are to provide the complete set of requested logs.
   
4. You are to keep all your trusted tools that the scanners may detect in a password protected archive. This is to prevent them from being deleted as we've had complaints or refusal to use the scanner for this reason.
   
5. You are to respond to every step I ask you to do using the format provided at the end of my post.
   
6. You agree that I have the right to discontinue the analysis at any time, upon a violation of a single rule.
   

Provided that you will continue with this service, you hereby agree to the above statements. If you deem the conditions are portraying equality, I will willingly perform the analysis without further delay. Should you have any concerns or problems with the above conditions, or if you feel that I have overlooked your log, do inform me through a Private Message.

Thank you.

Genuinely yours,
Quintus

• Pre-Step
  
  Click 'here' to download ATF-Cleaner by Atribune. Save it to your Desktop.

• • Double-click ATF-Cleaner.exe and select Run when prompted to execute the program.
    
  • Under the Main tab, please check the Select All box.
    
  • Press the Empty Selected button.
    • If you are using Firefox as your browser:
      • Click the Firefox tab at the top and check the Select All box.
        
      • Press the Empty Selected button.
        
      • Note: If you wish to keep your saved passwords, click No at the next prompt.
  • • If you are using Opera as your browser:
      • Click the Opera tab at the top and check the Select All box.
        
      • Press the Empty Selected button.
        
      • Note: If you wish to keep your saved passwords, click No at the next prompt.
  • Click Exit on the Main tab to close the program.

• Step 1
  
  Please download ComboFix from one of the following locations:
  
  'Link 1'
  'Link 2'
  
  
  **IMPORTANT!**
  
  
  Let me give you a warning beforehand. I am instructing you to use one of the most powerful removal tool created. A simple mistake of running ComboFix without a helper's advice might render your machine unbootable. Do note that the steps below are crucial for the success of the clean-up you are currently undergoing. If by any chance you failed to meet any of them, I can almost guarantee a dreadful occurrence happening. See to it that you read the instructions first up to the very end and follow them accordingly after to ensure the best possible performance.

• • Save ComboFix to your Desktop.
    
  • Disable your anti-virus and anti-spyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with ComboFix. If you have difficulty properly disabling your protective programs, refer to 'this' link.
    
  • Double-click ComboFix.exe and follow the prompts.
    
  • As part of its process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery or repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
    
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
    
  • If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
    
    
    

• • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
    
    
    
    
    
  • Click on Yes, to continue scanning for malware.
    
  • When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Reminders:

1. Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
   
2. Do not "re-run" ComboFix. If you have a problem, reply back for further instructions.
   
3. ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
   
4. ComboFix prevents autorun of all CD, floppy and USB devices to assist with malware removal and increase security. If this is an issue or makes it difficult for you - please tell me.
   
5. ComboFix disconnects your machine from the Internet. The connection is automatically restored before ComboFix completes its run. If ComboFix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

• In your next post, please provide the following:
  • A Fresh HijackThis (HJT) Log
    
  • ComboFix Log

• Format of Response
  
  
  Code:

  [color=#00BFFF][b]Step #[/b][/color]
[color=#FFD700][b]Problems Encountered:[/b][/color]

[color=#00BFFF][b]Step #[/b][/color]
[color=#FFD700][b]Problems Encountered:[/b][/color]

[color=#00BFFF][b]Step #[/b][/color]
[color=#FFD700][b]Problems Encountered:[/b][/color]

[color=#00BFFF][b]Link To Requested Logs:[/b][/color]

Ok i ran the Combo Fix log and had to install microsoft windows recovery console, then it came to the screenshot" click yes to continue scanning for malware and continued scanning and ended up restarting my computer, once my computer had fully loaded up, there was no ComboFix log, what do i do now?