1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Ukash again

Discussion in 'Windows - Virus and spyware problems' started by neilcolt, Oct 15, 2013.

  1. neilcolt

    neilcolt Regular member

    Joined:
    Aug 10, 2008
    Messages:
    186
    Likes Received:
    0
    Trophy Points:
    26
    Hi,
    Usually I can get rid of this by doing the reboot in safe mode,however this time when I go to safe mode the Pc keeps rebooting into normal windows mode.
    There is malwarebytes(freeware)installed on this PC but it doesnt seem to have stopped it this time.
    Is there any method of using a usb stick with a program on or a disk where i can reboot the pc and these will take this awful pest off.
    Help appreciated as always.
     
  2. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,691
    Likes Received:
    35
    Trophy Points:
    78
    What is it you are trying to rid by booting in safe mode?

    There are several things that can keep you from booting in safe mode like the Trojan Sirefe.

    Have you tried anything except MBAM?

    Maybe Combofix can fix it.

    Run Combofix:

    You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

    Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

    Combofix may need to reboot your computer more than once to do its job this is normal.

    You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.

    Link 1
    Link 2
    Link 3

    1. Close any open browsers or any other programs that are open.
    2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

    Double click on combofix.exe & follow the prompts.
    When finished, it will produce a report for you.

    Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

    Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer.

    "information and logs"

    In your next post I need the following
    Log from Combofix
    let me know of any problems you may have had
    How is the computer doing now?
     
  3. neilcolt

    neilcolt Regular member

    Joined:
    Aug 10, 2008
    Messages:
    186
    Likes Received:
    0
    Trophy Points:
    26
    THanks for this Ukash now removed.Solved.
     
  4. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,691
    Likes Received:
    35
    Trophy Points:
    78
    That took care of that little problem for the moment. You are still infected and if you don't clean it all out, it will come back to haunt you:(

    If you would like, I can help you get it clean......

    Run these programs and you will see that you still have some malware that is deep in your machine.

    --AdwCleaner--

    Please download AdwCleaner by Xplode to your Desktop.

    • Close all open programs and internet browsers.
    • Double click on AdwCleaner.exe to run the tool.
    • Click on Delete tab follow the prompts.
    • A log file will automatically open after the scan has finished.
    • Please post the content of that log file with your next answer.
    • You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).



    [​IMG] —Junkware Removal Tool--

    Please download Junkware Removal Tool to your Desktop.
    Please close your security software to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete, depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
    • Please post the contents of JRT.txt into your reply.




    --RogueKiller--

    • Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit
    • Quit all programs that you may have started.
    • Please disconnect any USB or external drives from the computer before you run this scan!
    • For Vista or Windows 7, right-click and select "Run as Administrator to start"
    • For Windows XP, double-click to start.
    • Wait until pre-scan has finished ...
    • Then Click on "Scan" button
    • Wait until the Status box shows "Scan Finished"
    • click on "delete"
    • Wait until the Status box shows "Deleting Finished"
    • Click on "Report" and copy/paste the content of the Notepad into your next reply.
    • The log should be found in RKreport[1].txt on your Desktop
    • Exit/Close RogueKiller+


    Please paste the logs in your next reply.
    Let me know what problem persists and we can dig the rest of the malware out.

    Just here to help..
    2oG
     

Share This Page