Spyware Doctor

meltdown_point

Ok........phew,

I have spent all day tearing my hair out (yep nearly bald)

Trying to get rid of security tool on my laptop!! (tramps:mad:)

I have downloaded spyware Dr.....and it was supposed to be the free version!! but it hasnt got rid of this virus:(

Its now looking for me to register and its costing money I dont have:(

when I click fix checked it bringing me to a new page!!

HELP please!!!

meltdown_point

now windows is shutting down my laptop:(
sigh im not coping with this too well!!

Vomityspice

Download Malwarebytes! It's free, use this link

http://www.malwarebytes.org/mbam-download.php

Update the definition and run the scan!

meltdown_point

just done malwarebytes:).....shutdown laptop, and started again....going to go to step 2 in the stickie..........

meltdown_point

http://www.lavasoftusa.com/products/...e_personal.php isnt working for me:(

meltdown_point

ok....will just installing the malware be enough......will this virus come back??

maxtweenie

Try getting it from here;

http://www.lavasoft.com/products/ad_aware_free.php

aliEnRIK

Please open malwarebytes, goto LOGS and post the WHOLE of the log that was created

reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

davb

To start with just run MalwareBytes. Make sure it updates after install, run a full scan, fix what it finds and then post the log here.
After that reboot and use HijackThis - run it, but don't fix anything, just post the log here.

meltdown_point

ok gonna post log now

meltdown_point

Malwarebytes' Anti-Malware 1.42
Database version: 3365
Windows 6.0.6002 Service Pack 2 (Safe Mode)
Internet Explorer 8.0.6001.18865
15/12/2009 16:30:46
mbam-log-2009-12-15 (16-30-46).txt
Scan type: Quick Scan
Objects scanned: 94020
Time elapsed: 4 minute(s), 27 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\91807631 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
C:\ProgramData\91807631 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
Files Infected:
C:\ProgramData\91807631\91807631.exe (Rogue.Multiple.H) -> Quarantined and deleted successfully.
C:\Users\Me Myself and I\Desktop\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.
C:\Users\Me Myself and I\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.