Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Security toolbar, and lots of other creepy stuff.. Help!

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby vikraman007 » November 10th, 2007, 9:46 am

Find AWF report by noahdfear ©2006
Version 1.40
Option 3 run successfully

The current date is: Sun 11/11/2007
The current time is: 7:40:11.70


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\MESSEN~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\SKYPE\PHONE\BAK

0 File(s) 0 bytes

Directory of C:\QOOBOX\QUARAN~1\C\PROGRA~1\COMMON~1\WINANT~1\BAK

06/06/2007 09:35 AM 618,496 WAS7Mon.exe.vir
1 File(s) 618,496 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

618496 Jun 6 2007 "C:\qoobox\Quarantine\C\Program Files\Common Files\WinAntiSpyware 2007\bak\WAS7Mon.exe.vir"


end of report

==============================================

By the time the above report came up in notepad, FindAWF was already gone. So, I had to restart it to perform the '4' option. It said something about resetting domain zones and I just said yes. Your instructions didnt mention anything about it, but i am hoping thats ok.



Everything looks ok. Some sites I visited yesterday still spawned popup ads but that always was the case and as soon as I navigated away things became normal.

Is there any way to block a Pop-up for sure? even a desired one, so that unless i right-click on the info bar and allow it, NOTHING gets popped up?
Seems like there ought to be..

Other than that, things are looking good. Thanks a bunch!
vikraman007
Active Member
 
Posts: 12
Joined: November 7th, 2007, 10:53 am
Advertisement
Register to Remove

Unread postby Simon V. » November 10th, 2007, 9:56 am

Your instructions didnt mention anything about it, but i am hoping thats ok.


That's fine :)

Some sites I visited yesterday still spawned popup ads


Are you saying it's related to the sites you visit?

Is there any way to block a Pop-up for sure?


You said in your last post that you switched to Firefox. The option to block pop-ups is on by default. Please check that setting: go to Extra > Options.... Under the tab Content, make sure the first option is checked.

Other than that, things are looking good. Thanks a bunch!


You're welcome :) Here are some tips to stay clean in the future:

Click Start then Run....
  • Type Combofix /u in the runbox and click OK. (Note: The space between the x and the /u needs to be there)

    Image
  • When shown the disclaimer, select 2.
Disable and Enable System Restore - If you are using Windows ME or XP then you should disable and re-enable system restore to make sure there are no infected files found in a restore point.

Step 1: Turn off System Restore:
  • On the desktop, right-click My Computer
  • Click Properties
  • Click the System Restore tab
  • Check Turn off System Restore
  • Click Apply, and then click OK
Step 2: Reboot your computer.

Step 3: Turn on System Restore:
  • On the desktop, right-click My Computer
  • Click Properties
  • Click the System Restore tab
  • Uncheck Turn off System Restore
  • Click Apply, and then click OK
Note: Only do this once, NOT on a regular basis!

Make your Internet Explorer More Secure
  • From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab.
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
    • Change the Download signed ActiveX controls to Prompt.
    • Change the Download unsigned ActiveX controls to Disable.
    • Change the Initialise and script ActiveX controls not marked as safe to Disable.
    • Change the Installation of desktop items to Prompt.
    • Change the Launching programs and files in an IFRAME to Prompt.
    • Change the Navigate sub-frames across different domains to Prompt.
    • When all these settings have been made, click on the OK button.
    • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Next press the Apply button and then the OK to exit the Internet Properties page.

Update your Anti-Virus Software - It is very imprtant that you update your anti-virus software at least once a week (even more if you wish). If you do not update your anti-virus software then it will not be able to catch any of the new variants that will come out.

Visit Microsoft's Update Site Frequently - It is important that you visit http://update.microsoft.com/ regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Install Spybot - Search and Destroy - Download and install Spybot - Search and Destroy with its TeaTimer option. This will provide real time spyware and hijacker protection on your computer alongside your virus protection. You should scan your computer with the program on a regular basis just as you would with your anti-virus software. A tutorial on installing and using this product can be found here:
Instructions for - Spybot S & D and Ad-aware

Install Ad-Aware - Download and install Ad-Aware. You should scan your computer with the program on a regular basis just as you would with your anti-virus software. A tutorial on installing and using this product can be found here:
Instructions for - Spybot S & D and Ad-aware

Install SpywareBlaster - SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. An article on anti-malware products with links for this program and others can be found here:
Computer Safety on line - Anti-Malware

Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

Stand Up and Be Counted! - Please take the time to tell us what you would like to be done about the people who are behind all the problems you have had. We can only get something done about this if the people that we help, like you, are prepared to complain. We have a dedicated forum for collecting these complaints: Malware Complaints. You have to be registered to post. After registering just find your country room and register your complaint. The infection you had was Vundo (Virtumundo)

>> Here << you can see how you can help us.
User avatar
Simon V.
MRU Emeritus
MRU Emeritus
 
Posts: 3388
Joined: November 11th, 2006, 3:35 pm
Location: Antwerp, Belgium

Unread postby vikraman007 » November 10th, 2007, 10:38 am

The _restore files still seem to exist.. Symantec is still finding viruses in them . How do i get rid of them?
vikraman007
Active Member
 
Posts: 12
Joined: November 7th, 2007, 10:53 am

Unread postby Simon V. » November 10th, 2007, 10:45 am

Follow the steps I've outlined (Disable and Enable System Restore). That should delete all restore points. If it doesn't work, please let me know.
User avatar
Simon V.
MRU Emeritus
MRU Emeritus
 
Posts: 3388
Joined: November 11th, 2006, 3:35 pm
Location: Antwerp, Belgium

Re: Security toolbar, and lots of other creepy stuff.. Help!

Unread postby vikraman007 » November 12th, 2007, 1:03 pm

That solved the issue with restore files. I also downloaded firewall from ZoneAlarm. The only remaining problem seems to be that I dont get internet access unless i put wireless PCI card (DLink) in the "trusted" category. Hope this is ok.

thanks a million
-sri
vikraman007
Active Member
 
Posts: 12
Joined: November 7th, 2007, 10:53 am

Re: Security toolbar, and lots of other creepy stuff.. Help!

Unread postby Simon V. » November 12th, 2007, 2:13 pm

The only remaining problem seems to be that I dont get internet access unless i put wireless PCI card (DLink) in the "trusted" category. Hope this is ok.


That's fine :)

Happy surfing and stay safe!
User avatar
Simon V.
MRU Emeritus
MRU Emeritus
 
Posts: 3388
Joined: November 11th, 2006, 3:35 pm
Location: Antwerp, Belgium

Re: Security toolbar, and lots of other creepy stuff.. Help!

Unread postby NonSuch » November 12th, 2007, 6:39 pm

Glad we could be of assistance.

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 27304
Joined: February 23rd, 2005, 7:08 am
Location: California
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 71 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware