hijack wont start, spybot won't install.. i'm in big trouble, don't i?
Thread: hijack wont start, spybot won't install.. i'm in big trouble, don't i?
I got a couple of "friends" in my wonderings. I eliminated a couple with the little PC doctor (some rootkits). Regular antivirus scans don't show anything (online with kaspersky and trend micro). Now i tried installing spybot. I download the exe file but it doesn't connect to the server.
My name is peku006 and I will be helping you to remove any infection(s) that you may have.
Please DO NOT run any other tools or scans whilst I am helping you.
It is important that you reply to this thread. Do not start a new topic.
Click Next on seeing the Welcome to the Compressed (zipped) Folders Extraction Wizard.
Click on the Browse button. Click on Desktop. Then click OK.
Click Next. It will start extracting.
Once done, check (tick) the Show extracted files box and click Finish.
Double click on gmer.exe to run it. It will start running a scan. If it detects rootkit activity, you will receive a prompt to run a full scan. Click Yes.
When done, you may receive another notice. Click OK.
Click on Save ... to save a log.
Copy and paste in Gmer.txt and click Save.
If you receive no notice, click on the Scan button.
It will start scanning again.
When done, click on Save ... to save a log.
Note: Do not run any programs while Gmer is running.
I don't help with logs thru PM. If you have problems create a thread in the forum, please.
i still can't connect to any security website. for instance i can download the spybot installation file but then it doesn't log to the server during the installation so I can't install it. same with trend micro, bitdefender etc.
I attached the hijack notepad. I really appreciate any advice.
Please download Malwarebytes' Anti-Malware and save it to a convenient location.
Double click on mbam-setup.exe to install it.
Malwarebytes' Anti-Malware will now check for updates. If your firewall prompts, please allow it. If you can't update it, select the Update tab. Under Update Mirror, select one of the websites and click on Check for Updates.
Select the Scanner tab. Click on Perform full scan, then click on Scan.
Leave the default options as it is and click on Start Scan.
When done, you will be prompted. Click OK, then click on Show Results.
Checked (ticked) all items except items in the System Volume Information folder and click on Remove Selected.
After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest.
1.I already installed Malwarebytes. However it won't update. I don't have access to a mirror, under the Update tab it is only one button: "Check for Updates". I clicked it and it doesn't connect. I renamed the exe file and scanned with it, but it won't find any problem. Same with Superantispyware.
I did also run a scan with Superantispyware in Safe Mode. Clean again.
I also run a scan from an external drive with ClamWinPortable. Clean again.
Shall i rescan and attache Malwarebytes logs (un-updated)?
2.Do you still need me to run DDS and GMER (sorry, i didn't see your post last night, before i posted the Hijack log).
3.Please see attached the RSIT files.
Thank you for your help. Now that I saw your reply i will follow your new indications step by step.
i did run one more scan with the un-updated malwarebytes after my post. to my surprise.. it found a bunch of staff. yesterday i did run superspyware and it was clean. trojan downloader maybe?
after cleaning still can't log to spybot server.
anyway, please see attached the malwarebytes log and the rsit log, after cleaning with malwarebytes.
Download ATF (Atribune Temp File) CleanerÂ© by Atribune to your desktop.Double-click ATF Cleaner.exe to open it.
I cleaned with ATF, then scanned with Kaspersky, then run the rsit hijack. Kaspersky didn't find anything, but still Spybot won't connect to the server. Please see below the logs.
"C:\Program Files\SAS\SAS 9.1\sas.exe"="C:\Program Files\SAS\SAS 9.1\sas.exe:*:Enabled:SAS 9.1 for Windows"
"C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\Program Files\FiSTiNG4FUN\Commview for Wifi\CommViewWiFi\WEPdecoder.exe"="C:\Program Files\FiSTiNG4FUN\Commview for Wifi\CommViewWiFi\WEPdecoder.exe:*:Enabled:WEP key recovery"
I'm afraid I have unpleasant news for you. There is evidence of several infections on your computer. One or more is a Password Stealer. It allows outsiders to monitor your Internet activity and private information. It then sends the stolen data to a hacker site.
If you have ever used this computer for shopping, banking, or any transactions relating to your financial well being: Call all of your banks, credit card companies, and financial institutions, informing them that you may be a victim of identity theft, and to put a watch on your accounts or change all your account numbers.
thanks peku. importantly now:what do I have to do to clean? can I clean or I have to format?