Jump to content

Infected by MagNiPic, ZeroAccess, Installmate, and maybe others


Recommended Posts

Good, how did you disable it??

You should be able go Start > Programs > MSE > just run it and it should start.

 

-----------------------------

 

Lets check your computers security before you go and we have a little cleanup to do also:
 
Download Security Check by screen317 from HERE or HERE.
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt.
Please Post the contents of that document.
Do Not Attach It!!!

MrC
 
Link to post
Share on other sites

I forgot about the icon in the Programs folder. I just went to its installed folder and clicked on msseces.exe (the GUI interface for it) and reenabled realtime monitoring.

Here is the output

Results of screen317's Security Check version 0.99.70

Windows XP Service Pack 3 x86

Internet Explorer 8

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Microsoft Security Essentials

Antivirus up to date!

`````````Anti-malware/Other Utilities Check:`````````

WinPatrol

CA Yahoo! Anti-Spy (remove only)

Malwarebytes Anti-Malware version 1.75.0.1300

CCleaner

Java 7 Update 25

Adobe Flash Player 11.8.800.94

Adobe Reader XI

Mozilla Firefox (22.0)

````````Process Check: objlist.exe by Laurent````````

Microsoft Security Essentials MSMpEng.exe

Microsoft Security Essentials msseces.exe

WinPatrol winpatrol.exe

Malwarebytes' Anti-Malware mbamscheduler.exe

BillP Studios WinPatrol winpatrol.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C:: 7%

````````````````````End of Log``````````````````````

Link to post
Share on other sites

That all looks OK.......

 

A little clean up to do....
 
Please Uninstall ComboFix: (if you used it)
 
Press the Windows logo key + R to bring up the "run box"
 
Copy and paste next command in the field:
 
ComboFix /uninstall
 
Make sure there's a space between Combofix and /
 
cf2.jpg
 
Then hit enter.
This will uninstall Combofix, delete its related folders and files,  hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point
 
(If that doesn't work.....you can simply rename ComboFix.exe to Uninstall.exe and double click it to complete the uninstall or download and run the uninstaller)
 
---------------------------------
 
If you used DeFogger to disable your CD Emulation drivers, please re-enable them.
 
-------------------------------
 
Please download OTC to your desktop.
 
Double-click OTC to run it. (Vista and up users, please right click on OTC and select "Run as an Administrator")
Click on the CleanUp! button and follow the prompts.
(If you get a warning from your firewall or other security programs regarding OTC attempting to contact the Internet, please allow the connection.)
You will be asked to reboot the machine to finish the Cleanup process, choose Yes.
After the reboot all the tools we used should be gone.
Note: Some more recently created tools may not yet be removed by OTC. Feel free to manually delete any tools it leaves behind.
 
Any other programs or logs you can manually delete.
IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST, MBAR, etc....AdwCleaner > just run the program and click uninstall.
 
-------------------------------
 
Any questions...please post back.
 
If you think I've helped you, please leave a comment > click on my  avatar picture > click Profile Feed.
 
Take a look at My Preventive Maintenance to avoid being infected again.
 
Good Luck and Thanks for using the forum,  MrC
 

 

 

Link to post
Share on other sites

OK, i am back up and running. Thank you!

Only thing is the MSE icon is not showing up in the active tasks, but it seems to be running.

I also have 3 other systems laying around (1 xp, and 2 Vistas) that i need to do a preliminary check on. Should i just run malwarebytes to check them, or are there some other tools i should use also? I want to make a clean sweep of this stuff.

Link to post
Share on other sites

Only thing is the MSE icon is not showing up in the active tasks, but it seems to be running.

There may be an option in the program itself to show it, please check.
If not I would just use Google to look for a solution.

I also have 3 other systems laying around (1 xp, and 2 Vistas) that i need to do a preliminary check on. Should i just run malwarebytes to check them, or are there some other tools i should use also? I want to make a clean sweep of this stuff.

Run Malwarebytes and your anti-virus to clean things up.

MrC

Link to post
Share on other sites

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.