HELP!!!

[Sann Heaton]

I NEED HELP....I RAN MALWAREBYTES AND IT CAME UP WITH EIGHT INFECTED FILES AND I'M SCARED TO DELETE THEM BECAUSE THE LAST TIME I RAN MALWAREBYTES AND DELETED EVERYTHING THAT WAS INFECTED MY COMPUTER STOPPED WORKING AND IT WOULDN'T LOAD TO THE LOG IN SCREEN, JUST A BLACK SCREEN I WAS WONDERING IF SOMEBODY CAN TELL ME IF I SHOULD HAVE NO PROBLEM DELETING THE FOLLOWING FILES:

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\J8RPLTROBQ (Trojan.FakeAlert) -> No action taken.

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\j8rpltrobq (Trojan.FakeAlert) -> No action taken.

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> No action taken.

[noknojon]

Hello Sann Heaton , and welcome to Malwarebytes.org

As we don't work on Malware removal in the general forums.

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

This black screen is a reasonably new infection called Danol trojan, and the experts are onto it now -

Thank you -

[Sann Heaton]

THE INSTRUCTIONS STATED THAT I SHOULD DELETE THE INFECTED FILES BUT I DON'T WANT THE SAME PROBLEM TO HAPPEN BECAUSE THEN I WILL HAVE TO PAY $120 TO RESTORE MY COMPUTER TO FACTORY DEFAULT BECAUSE APPARENTLY LAST TIME I DELETED EVERYTHING IT DELETED A DRIVE THAT COMPUTER NEEDED TO RUN PROPERLY, I JUST WANT TO KNOW IF I DELETE THE FILES I POSTED IF I SHOULD HAVE A PROBLEM AFTER.

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\J8RPLTROBQ (Trojan.FakeAlert) -> No action taken.

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\j8rpltrobq (Trojan.FakeAlert) -> No action taken.

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> No action taken.

[noknojon]

Hi again -

If you do not feel comfortable to complete any of the steps listed, then do what you can and move to the second part and post in the area listed there -

The only people that work in that area are Qualified experts -

They will help you further

Thank You -

[Sann Heaton]

OK THANK YOU.