Jump to content

Rogue Remover Problems


george_gaz

Recommended Posts

Hello,

I have recently been hit by a bunch of virus/trojans or whatever they are called. I am not sure how they got in as I have a firewall and anti-virus which is constantly on.

This morning I booted up as normal but when I visit a web page the browser minimises and a pop up comes up telling me I have infections. It then takes me to "premium-live-scan.com". Obviously I ignore it as it is clearly malware or whatever.

It is happening loads. I ran full scans on my machine and it turned up nothing which was strange as it was clear that I was infected. I then updated my AV software and this then found like 50 infections. I also installed SpyWare Doctor and this found a bunch of infections.

I removed them all.

This did not solve the problem. :huh: The other weird thing that is happening is that whenever I open a program, my firewall prompts me saying that the program is trying to log keystrokes!!!

I installed this software "RogueRemover" and it finds the file (which I find in regedit but cannot delete). Now this is where it is strange (RogueRemover was also flagged for logging keystrokes. Does it do this?) because RogueRemover just does not remove the files!

So I do a scan and it finds three threats:

--------------------------------------------------------------------------

Malwarebytes' RogueRemover

Malwarebytes

Link to post
Share on other sites

Hello,

I have recently been hit by a bunch of virus/trojans or whatever they are called. I am not sure how they got in as I have a firewall and anti-virus which is constantly on.

This morning I booted up as normal but when I visit a web page the browser minimises and a pop up comes up telling me I have infections. It then takes me to "premium-live-scan.com". Obviously I ignore it as it is clearly malware or whatever.

It is happening loads. I ran full scans on my machine and it turned up nothing which was strange as it was clear that I was infected. I then updated my AV software and this then found like 50 infections. I also installed SpyWare Doctor and this found a bunch of infections.

I removed them all.

This did not solve the problem. :huh: The other weird thing that is happening is that whenever I open a program, my firewall prompts me saying that the program is trying to log keystrokes!!!

I installed this software "RogueRemover" and it finds the file (which I find in regedit but cannot delete). Now this is where it is strange (RogueRemover was also flagged for logging keystrokes. Does it do this?) because RogueRemover just does not remove the files!

So I do a scan and it finds three threats:

--------------------------------------------------------------------------

Malwarebytes' RogueRemover

Malwarebytes

Link to post
Share on other sites

The exact same thing is happening to me. The only difference is that RogueRemover does not detect

Location: c:\windows\system32\dehehoji.dll

but

Location: c:\windows\system32\bulimane.dll

instead.

I wanted to thank you, exile, for your help, and I was also wondering if the Anti-Malware program seemed to work completely for you, george?

Thank you,

Danielle

Link to post
Share on other sites

The exact same thing is happening to me. The only difference is that RogueRemover does not detect

Location: c:\windows\system32\dehehoji.dll

but

Location: c:\windows\system32\bulimane.dll

instead.

I wanted to thank you, exile, for your help, and I was also wondering if the Anti-Malware program seemed to work completely for you, george?

Thank you,

Danielle

You are both very welcome, and Danielle I also recommend that you read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs here: http://www.malwarebytes.org/forums/index.php?showforum=7 This will help to ensure that you are totally clean, even if there is something that Malwarebytes' Anti-Malware missed.

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. Good luck and safe surfing.

Link to post
Share on other sites

You are both very welcome, and Danielle I also recommend that you read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs here: http://www.malwarebytes.org/forums/index.php?showforum=7 This will help to ensure that you are totally clean, even if there is something that Malwarebytes' Anti-Malware missed.

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. Good luck and safe surfing.

Hi ,I to have had the same problem , and have used MB to delete them but when I rebooted the pc they came back .

How do I overcome that ? I have been running Kaspersky suite and it didnt block them until they were on the pc ie when I opened Firefox

Kaspersky then blocked the page opening ....thus they were already on the pc

thanks

Link to post
Share on other sites

Greetings and welcome to the forum. To get you fixed up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.