Forgeahead Posted September 25, 2009 ID:132739 Share Posted September 25, 2009 I have an infection with Protection System, Security System Alert and Windows Security Alert popups all the time. I ran Winlogon.exe and everytime I remove the item with the little shield icon it comes back. What do I do now? I have attached the report from the Stealth Items Tab on the program for you to review. Will be here for a while this evening trying to fix this. ThanksRootRepeal_Report9_24_09.txt Link to post Share on other sites More sharing options...
Forgeahead Posted September 25, 2009 Author ID:132741 Share Posted September 25, 2009 I have an infection with Protection System, Security System Alert and Windows Security Alert popups all the time. I ran Winlogon.exe and everytime I remove the item with the little shield icon it comes back. What do I do now? I have attached the report from the Stealth Items Tab on the program for you to review. Will be here for a while this evening trying to fix this. ThanksSorry forgot to write that I Ran RootRepeal and the attachment is from that Stealth Items Tab. Link to post Share on other sites More sharing options...
sjpritch25 Posted September 25, 2009 ID:132813 Share Posted September 25, 2009 Welcome to Malwarebytes!!! Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop. Link 1 Link 2 Link 3 --------------------------------------------------------------------Double click on Combo-Fix.exe & follow the prompts. When finished, it will produce a report for you. Please post the C:\ComboFix.txt along with a HijackThis log so we can continue cleaning the system. Link to post Share on other sites More sharing options...
Forgeahead Posted September 25, 2009 Author ID:132935 Share Posted September 25, 2009 Here is the Combofix.txt file. How do I make the HijackThis Log? Welcome to Malwarebytes!!! Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop. Link 1 Link 2 Link 3 --------------------------------------------------------------------Double click on Combo-Fix.exe & follow the prompts. When finished, it will produce a report for you. Please post the C:\ComboFix.txt along with a HijackThis log so we can continue cleaning the system.ComboFix.txt Link to post Share on other sites More sharing options...
Forgeahead Posted September 25, 2009 Author ID:132946 Share Posted September 25, 2009 In the mean time I was able to install Malewarebytes, it updated to bd #2857. I ran a quick scan and here is that log. The system seems to be running much better now and no popups. Is there more I need to do. I plan to buy the pro version of your software, will it maintain real time protection against these types of re infection which my AV software seems to not provide. ThanksTerry Here is the Combofix.txt file. How do I make the HijackThis Log?mbam_log_2009_09_25__05_53_15_.txt Link to post Share on other sites More sharing options...
sjpritch25 Posted September 25, 2009 ID:133230 Share Posted September 25, 2009 Did you remove the items detected by Malwarebytes? If not please do.Go to Start ---> Run ---> Type "c:\documents and settings\Terrance Dunder\My Documents\Downloaded Program Updates\Malwarebytes Anti-Malware\New Folder\Combo-fix.exe" /u and press Enter.The paid version of Malwarebytes has a protection module that's different than most Anti-Malware products out now. So i would say it probably could of stopped the install, but nothing is foolproof. I"m sure the staff could answer any questions you have. Link to post Share on other sites More sharing options...
Forgeahead Posted September 26, 2009 Author ID:133306 Share Posted September 26, 2009 Yes I removed the items that Malewarebytes found. I also installed the paid version and it is running now on my computer. the command line you indicated "c:\documents and settings\Terrance Dunder\My Documents\Downloaded Program Updates\Malwarebytes Anti-Malware\New Folder\Combo-fix.exe" /u" did not do anything. Should it have? Thanks again for your help. Terry Did you remove the items detected by Malwarebytes? If not please do.Go to Start ---> Run ---> Type "c:\documents and settings\Terrance Dunder\My Documents\Downloaded Program Updates\Malwarebytes Anti-Malware\New Folder\Combo-fix.exe" /u and press Enter.The paid version of Malwarebytes has a protection module that's different than most Anti-Malware products out now. So i would say it probably could of stopped the install, but nothing is foolproof. I"m sure the staff could answer any questions you have. Link to post Share on other sites More sharing options...
Forgeahead Posted September 26, 2009 Author ID:133359 Share Posted September 26, 2009 One final item. I ran a full scan and Malewarebytes found another 5 items that I deleted also. Attached is that log. Any final messages? Thanksmbam_log_2009_09_25__21_36_53_.txt Link to post Share on other sites More sharing options...
sjpritch25 Posted September 26, 2009 ID:133382 Share Posted September 26, 2009 it should run because that is the location of Combofix, unless you moved it some place else. Did you copy and paste it in the box because the quotes need to be included. Link to post Share on other sites More sharing options...
Forgeahead Posted September 26, 2009 Author ID:133648 Share Posted September 26, 2009 I had left out the "" with them it ran. ComboFix updated to latest version the did it's thing and here is the latest ComboFix Log. TerryComboFix.txt Link to post Share on other sites More sharing options...
sjpritch25 Posted September 27, 2009 ID:134065 Share Posted September 27, 2009 Okay i need you to copy and paste the same command with quotes but add /u at the end. Just like a posted. This command will uninstall ComboFix. Link to post Share on other sites More sharing options...
Forgeahead Posted September 28, 2009 Author ID:134349 Share Posted September 28, 2009 finished, it gave back a command that stated that ComboFix had been uninstalled. Thanks for you help, have a great day. Link to post Share on other sites More sharing options...
Recommended Posts