Announcements

[LDTate]

Hello and Welcome to NUTn WORKS

You must Register and be logged in to Post your HijackThis log.

Following is a guide that will help you to remove many of the most common problems, and allow us to help you most efficiently.

Please remember, people are helping you for FREE.
We all have REAL jobs, families, and have other interests.

Anything that you can do to help us before posting a log is greatly appreciated. Please acknowledge that you've followed these required steps.


DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

XP Users

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Uncheck "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Uncheck "Hide protected operating system files."
Click Apply, and then click OK.


Please do not delete anything unless instructed to.


We've been seeing some Java infections lately.
Go here and follow the instructions to clear your Java Cache


Next:

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.[/list]If you use Firefox browser

• Click Firefox at the top and choose: Select All
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.


It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
  
• When the scan is complete, click OK, then Show Results to view the results.
• 
• Then click Remove Selected .
• When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
• Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Next:

Click here to get the latest HijackThis version. Install and run HijackThis do a system scan and save logfile, the saved the log file
will be in the folder you just created. Open the file click edit then select all click edit again then copy.

Start a new thread by clicking on New Thread

The "Topic Title" should contain the name of the infection that you are having a problem with.

Tell us if you're having any problems, and please be specific. Let us know what you've already done to fix it.


Please post the scan results from MBAM and a HijackThis log.


This malware removal forum is set up to help those in need of assistance with their personal computers.

We do realise that on occasion a business where staff are trained to remove malware need a second opinion. In that case please state that up-front and note the steps already taken.

If one is not a malware removal specialist it really is not nice to charge a client for ones that computer was actually cleaned up by trained volunteers.

Learn how to help others.

http://www.nutnworks.com/forums//ann...t.php?f=13&a=9