Sann Heaton Posted December 28, 2009 ID:176030 Share Posted December 28, 2009 I NEED HELP....I RAN MALWAREBYTES AND IT CAME UP WITH EIGHT INFECTED FILES AND I'M SCARED TO DELETE THEM BECAUSE THE LAST TIME I RAN MALWAREBYTES AND DELETED EVERYTHING THAT WAS INFECTED MY COMPUTER STOPPED WORKING AND IT WOULDN'T LOAD TO THE LOG IN SCREEN, JUST A BLACK SCREEN I WAS WONDERING IF SOMEBODY CAN TELL ME IF I SHOULD HAVE NO PROBLEM DELETING THE FOLLOWING FILES: Registry Keys Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> No action taken.HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> No action taken.HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.HKEY_CURRENT_USER\SOFTWARE\J8RPLTROBQ (Trojan.FakeAlert) -> No action taken.Registry Values Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\j8rpltrobq (Trojan.FakeAlert) -> No action taken.Registry Data Items Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> No action taken. Link to post Share on other sites More sharing options...
noknojon Posted December 28, 2009 ID:176041 Share Posted December 28, 2009 Hello Sann Heaton , and welcome to Malwarebytes.orgAs we don't work on Malware removal in the general forums.Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.One of the expert helpers there will give you one-on-one assistance when one becomes available.This black screen is a reasonably new infection called Danol trojan, and the experts are onto it now -Thank you - Link to post Share on other sites More sharing options...
Sann Heaton Posted December 28, 2009 Author ID:176058 Share Posted December 28, 2009 THE INSTRUCTIONS STATED THAT I SHOULD DELETE THE INFECTED FILES BUT I DON'T WANT THE SAME PROBLEM TO HAPPEN BECAUSE THEN I WILL HAVE TO PAY $120 TO RESTORE MY COMPUTER TO FACTORY DEFAULT BECAUSE APPARENTLY LAST TIME I DELETED EVERYTHING IT DELETED A DRIVE THAT COMPUTER NEEDED TO RUN PROPERLY, I JUST WANT TO KNOW IF I DELETE THE FILES I POSTED IF I SHOULD HAVE A PROBLEM AFTER.Registry Keys Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> No action taken.HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> No action taken.HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.HKEY_CURRENT_USER\SOFTWARE\J8RPLTROBQ (Trojan.FakeAlert) -> No action taken.Registry Values Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\j8rpltrobq (Trojan.FakeAlert) -> No action taken.Registry Data Items Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> No action taken. Link to post Share on other sites More sharing options...
noknojon Posted December 28, 2009 ID:176063 Share Posted December 28, 2009 Hi again -If you do not feel comfortable to complete any of the steps listed, then do what you can and move to the second part and post in the area listed there -The only people that work in that area are Qualified experts - They will help you further Thank You - Link to post Share on other sites More sharing options...
Sann Heaton Posted December 28, 2009 Author ID:176070 Share Posted December 28, 2009 OK THANK YOU. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now