LandzDown Forum

Welcome to LandzDown Forum. 

You have likely found your way here due to malware on your computer.  We will do our best to assist you.  However, in order to do so, please follow all instructions in the sequence given.  If you have questions regarding any of the instructions or problems running any tools, please let us know.

Cautions!

• Do NOT use any tools such as ComboFix or HijackThis fixes without supervision of a qualified adviser.  Doing so could make your computer inoperable and could result in requiring a full reinstall of your operating system, losing all your programs and data.
• Do NOT follow instructions that were provided to others, even though they may appear to be a solution to your problem.  Each infection causes unique problems on each computer. Everyone has different software on their computer and that makes each log different.
• Do NOT install/re-install any programs or run any fixes or scanners that you have not been instructed to use.  This may cause conflicts with the tools being used in the cleanup process.
• Some of the requested logs will be quite large so it may be necessary to split them over multiple replies.  Be sure to check that the complete log has posted.
• Your security programs may give warnings for some of the tools you will be asked to use.  Be assured, any links provided are safe.  If you receive a UAC prompt, please approve the elevation.
• Please continue to respond until you receive the "All Clear".  Just because you cannot see a problem does not mean it isn't there.
• If you have questions regarding any of the instructions or problems running any tools, please let us know.

Prepare your computer for analysis and recommendations

Note:  If you have run and fixed anything with any programs, please restart the computer before proceeding.

1.  Uninstall the following via Add or Remove Programs in Control Panel:

• Should you have more than one antivirus software installed, leave only one and uninstall any others.
• File sharing programs such as uTorrent, Bittorrent, LimeWire, Morpheus, Azureus, Kazaa are a major conduit for malware and a likely source of your current issues.  It is requested that you uninstall any such programs prior to cleanup and to prevent reinfection.

2.  If you already have HijackThis installed on your computer, please download Random's System Information Tool (RSIT) by random/random and save it to your desktop:

• Windows 32-bit systems:  here
• Windows 64-bit systems:  here

• Double-click RSIT.exe to run RSIT.
• Click Continue at the disclaimer screen.
• Once it has finished, two logs will open. You will need to post (do not attach) the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

3. If you do NOT have HijackThis installed on your computer, please download DDS.scr by sUBs and save it to your desktop.

• Link

• Double-Click dds.scr and a command window will appear. This is normal
• Shortly after two logs will appear, DDS.txt & Attach.txt
• A window will open instructing you save & post (do not attach) the logs
• Save the logs to a convenient place such as your desktop

   

4. Please download Security Check by screen317 from here or here.

• Save it to your Desktop.
• Double-click SecurityCheck.exe and follow the on-screen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt.
• Please post the contents of that document with the other requested logs.

Posting Instructions

• Go to the Analysis and Malware Removal forum.
• Click the New Topic link.
• Add a title that describes your problem.  Please start your post with a brief explanation of what is happening to your PC and any steps you may have taken on your own.
• Copy/paste checkup.txt from SecurityCheck
• If you ran RSIT, copy/paste both log.txt and info.txt (Both logs can be found at C:\RSIT).
• If you ran DDS, copy/paste both DDS.txt and Attach.txt
• Complete your post by pressing the Post button.
• Please review your post to ensure that all logs have posted.  If anything is missing, create another reply and copy/paste the remaining log(s).
  
  Note:  Please do NOT attach logs.  All requested logs are to be copy/pasted in your topic.

Final Notes

1.  This site does not support the use of "cracked" programs.  If the presence of pirated/cracked software is detected on your computer, your topic will be closed. 

2.  We cannot undertake the liability of a business-owned asset.  If you are having problems with a business machine, please consult your IT Department or System Administrator.  It is further advisable that you consult your employer's "Acceptable Usage Policy" to ensure that you are not in breach of Company rules by attempting to fix a business asset.

3.  Please be patient.  The experts will review your logs and get back to you.  However, they are all volunteers and may not be available to assist when you post.

4.  Please subscribe to your topic so you will receive a notification when you have received a reply. 

• Click the button at the top of the thread. 
• Click OK to the popup reading "Are you sure you wish to enable notification of new replies for this topic?"