Rogue Remover Problems

[george_gaz]

Hello,

I have recently been hit by a bunch of virus/trojans or whatever they are called. I am not sure how they got in as I have a firewall and anti-virus which is constantly on.

This morning I booted up as normal but when I visit a web page the browser minimises and a pop up comes up telling me I have infections. It then takes me to "premium-live-scan.com". Obviously I ignore it as it is clearly malware or whatever.

It is happening loads. I ran full scans on my machine and it turned up nothing which was strange as it was clear that I was infected. I then updated my AV software and this then found like 50 infections. I also installed SpyWare Doctor and this found a bunch of infections.

I removed them all.

This did not solve the problem. The other weird thing that is happening is that whenever I open a program, my firewall prompts me saying that the program is trying to log keystrokes!!!

I installed this software "RogueRemover" and it finds the file (which I find in regedit but cannot delete). Now this is where it is strange (RogueRemover was also flagged for logging keystrokes. Does it do this?) because RogueRemover just does not remove the files!

So I do a scan and it finds three threats:

--------------------------------------------------------------------------

Malwarebytes' RogueRemover

Malwarebytes

[exile360]

Hello,

I have recently been hit by a bunch of virus/trojans or whatever they are called. I am not sure how they got in as I have a firewall and anti-virus which is constantly on.

This morning I booted up as normal but when I visit a web page the browser minimises and a pop up comes up telling me I have infections. It then takes me to "premium-live-scan.com". Obviously I ignore it as it is clearly malware or whatever.

It is happening loads. I ran full scans on my machine and it turned up nothing which was strange as it was clear that I was infected. I then updated my AV software and this then found like 50 infections. I also installed SpyWare Doctor and this found a bunch of infections.

I removed them all.

This did not solve the problem. The other weird thing that is happening is that whenever I open a program, my firewall prompts me saying that the program is trying to log keystrokes!!!

I installed this software "RogueRemover" and it finds the file (which I find in regedit but cannot delete). Now this is where it is strange (RogueRemover was also flagged for logging keystrokes. Does it do this?) because RogueRemover just does not remove the files!

So I do a scan and it finds three threats:

--------------------------------------------------------------------------

Malwarebytes' RogueRemover

Malwarebytes

[george_gaz]

Hello,

Thanks for the detailed reply. Much appreciated.

I installed the Anti-Malware package about an hour ago and it seems to have successfully found the infection and removed it.

I will keep you updated if anything returns.

Many thanks

[exile360]

No problem, glad I could help out. Just remember, if you see ANY signs of infection, or even if you don't but you want to make absolutely sure you're clean, just read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs here: http://www.malwarebytes.org/forums/index.php?showforum=7

[computer issues]

The exact same thing is happening to me. The only difference is that RogueRemover does not detect

Location: c:\windows\system32\dehehoji.dll

but

Location: c:\windows\system32\bulimane.dll

instead.

I wanted to thank you, exile, for your help, and I was also wondering if the Anti-Malware program seemed to work completely for you, george?

Thank you,

Danielle

[exile360]

The exact same thing is happening to me. The only difference is that RogueRemover does not detect

Location: c:\windows\system32\dehehoji.dll

but

Location: c:\windows\system32\bulimane.dll

instead.

I wanted to thank you, exile, for your help, and I was also wondering if the Anti-Malware program seemed to work completely for you, george?

Thank you,

Danielle

You are both very welcome, and Danielle I also recommend that you read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs here: http://www.malwarebytes.org/forums/index.php?showforum=7 This will help to ensure that you are totally clean, even if there is something that Malwarebytes' Anti-Malware missed.

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. Good luck and safe surfing.

[zandu]

You are both very welcome, and Danielle I also recommend that you read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs here: http://www.malwarebytes.org/forums/index.php?showforum=7 This will help to ensure that you are totally clean, even if there is something that Malwarebytes' Anti-Malware missed.

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. Good luck and safe surfing.

Hi ,I to have had the same problem , and have used MB to delete them but when I rebooted the pc they came back .

How do I overcome that ? I have been running Kaspersky suite and it didnt block them until they were on the pc ie when I opened Firefox

Kaspersky then blocked the page opening ....thus they were already on the pc

thanks

[exile360]

Greetings and welcome to the forum. To get you fixed up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.