6 replies to this topic

[RikardBoEriksson]

Hi there!

Malwarebytes reports ip-block 208.73.210.29 (Type: outgoing, Port: 51733, Process: sidebar.exe) over and over again on my parents computer. I followed instructions on the forum and i am sending the specified files. Malwarebytes dosent report anything when i do a full scan. Please help us!

Thank you!
/Rikard

Attached Files

•  Attach.txt   12.23K   24 downloads
•  DDS.txt   15.8K   19 downloads
•  mbam-log-2012-09-07 (14-50-52).txt   2.03K   11 downloads

[Maurice Naggar]

Hello RikardBoEriksson.

Please do NOT attach reports. Always Copy & Paste the contents inside the main-body of reply box.

Step 1
1. Go >> Here << and download ERUNT
(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
2. Install ERUNT by following the prompts
(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
3. Start ERUNT by doing a Right-Click on it & select Run As Admisnistrator

4. Choose a location for the backup
(the default location is C:\WINDOWS\ERDNT which is acceptable).
5. Make sure that at least the first two check boxes are ticked
6. Press OK
7. Press YES to create the folder.

Step 2
Show all files:

• Click the Start button, and then click Computer.
  
• On the Organize menu, click Folder and Search Options.
  
• Click the View tab.
  
• Locate and uncheck Hide file extensions for known file types.
  
• Locate and uncheck Hide protected operating system files (Recommended).
  
• Locate and click Show hidden files and folders.
  
• Click Apply > OK.

Step 3
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
For directions on how, see How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Do NOT turn off the firewall

• Close any/all open internet browsers. Save any open documents you have open & close programs you started.
  
• Also close any instant messenger program.
  
  
• Click on START>All Programs>Malwarebytes' Anti-Malware>Tools>Malwarebytes Anti-Malware Chameleon
  
  On Windows 7, press Windows-key, then start typing in text box [code]Malwarebytes[code] then select/click Malwarebytes Anti-Malware Chameleon
  
  
• Once the Help file opens, click on a Chameleon button (starting with #1)
  
• If running on Vista, Windows 7, press the Yes button when prompted at the UAC prompt to allow to run.
  
  
  
• You should see a black Command-prompt-window that remains open and says MBAM-chameleon ver. 1.6 at the top
  
• Press any key to continue as it says in the window {space-bar will do}
  
  
• If the Chameleon button you tried does not work, try the next Chameleon button shown. (There are 12 in all).
  
  
• Have infinite patience during this process
  
  
• Malwarebytes Chameleon will proceed to update Malwarebytes Anti-Malware, so ensure that you are connected to the internet if possible
  
• Once the update completes and it says your database is updated, click on OK button so that process can continue
  
  
• Malwarebytes Chameleon will then terminate any threats running in memory, which may take a while, so please be patient.
  
  
• After that, Malwarebytes Anti-Malware will open automatically and perform a Quick scan
  
  
• A quick scan will take a few minutes, possibly 5 or so minutes. Have infinite patience.
  
  
• Once the scan is complete, click on Show Results and remove any threats that are found by clicking Remove Selected
  
• If prompted to restart your computer to complete the removal process, click Yes
  
  
• If no threats are found, press OK button & press EXIT to end MBAM. Press the space-bar (or another key) to exit the command-prompt-window.
  
  
• After your computer restarts, open Malwarebytes Anti-Malware and perform one last Quick scan to verify that there are no remaining threats

Reply with copy of the MBAM scan log for review.

Next:

• Download & SAVE to your Desktop >> Tigzy's RogueKillerfrom here << or
  >> from here <<
  
• Quit all programs that you may have started.
  
• Please disconnect any USB or external drives from the computer before you run this scan!
  
• For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.
  For Windows XP, double-click to start.
  
• Wait until Prescan has finished ...
  
• Then Click on Scan button at upper right of screen.
  
• Wait until the Status box shows "Scan Finished"
  
• Click on Report and copy/paste the content of the Notepad into your next reply.
  
• The log should be found in RKreport[1].txt on your Desktop
  
  
• Do NOT press any Fix button.
  
• Exit/Close RogueKiller

When all done, Re-Enable your antivirus program.

Edited by Maurice Naggar, 08 September 2012 - 12:57 PM.

[Maurice Naggar]

{{ ping }}
Have you resolved your issues? You need to reply whithin the next day or two, otherwise this thread will be closed.

[RikardBoEriksson]

Hello Maurice!

Thank you for your help and that you spend your time on us. I have already left my parents so I need to guide them through the process by phone when I am back in one weeks time. So right now I don´t know if it is working or not. Hope it will. I will let you know if it will solve their problem.

Kind regards
/Rikard

[Maurice Naggar]

Status update, please.

[Maurice Naggar]

{{{ ping }}}
Do you still need help? or can we close this topic?

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!