MalWare Removal Forum

pgmigg,

My computer seems to be working perfectly now. I have no redirecting anymore, and am not having any problems.

Thanks for all of your help!

Hello mabbitt616a,

It is very nice to hear such good news!
Your latest set of logs appear to be clean!
This is my general post for when your logs show no more signs of malware.
Before I give you instructions how to keep your computer clean and secure, you need to make a few additional steps

Your Adobe Reader, Skype, and Java are out of date.

Step 1.
Remove Program(s)

1. Click on Start, then click the Start Search box on the Start Menu.
2. Copy and paste the value below without the word Code: into the open text entry box:
   
   Code:
   appwiz.cpl
   and press Enter - the Unistall or change a program list will be opened.
3. Click each Entry, as follows, one by one, if it exists, choose Uninstall, and give permission to Continue:
   Adobe Reader 9.4.2
   Java Auto Updater
   Java(TM) 6 Update 24
   
4. Take extra care in answering questions posed by any Uninstaller.
5. When the program(s) have been uninstalled, please close Control Panel.
6. Reboot you computer.

Step 2.
Latest Java Installation Needed!

Attention: Print these instructions or copy them. You will be closing your browser!!

DOWNLOAD LATEST VERSION

1. Get the latest version (7u4) of Java Runtime Environment (JRE)... © Sun Microsystems, Inc.
2. Click the "Download JRE" button to the right.
3. Check "Accept License Agreement "
4. Locate the entry for Windows x86 Offline, click on the associated file name, then save the file to your Desktop.

INSTALL Java

1. Close all open applications (standard), especially your browser.
2. From Desktop please right-click on jre-7u4-windows-i586.exe select "Run As Administrator..." to install the newest version.
3. Follow the on-screen directions. When installation is completed successfully, please reboot your computer normally.
4. Once the computer has been restarted, you can delete the "downloaded" installation file from your desktop.

OPTIONAL:
To prevent some unnecessary JAVA components from running when you boot your computer each time...

1. Go to Control Panel and click on the JAVA icon.
2. Press the Update tab and UNCHECK "Check for Updates Automatically". (You can check for updates manually.)
   
   Reply "Never Check" to the warning prompt.
3. Now press the Advanced tab. Press the [+] to expand the "Miscellaneous" options.
4. UNCHECK "Java Quick Starter".
5. Press Apply and OK, then close the Java Control Panel and exit Control Panel.

Step 3.
Update Adobe Reader
Your version of Adobe Reader is out-of-date. There are serious security issues with older versions of Adobe Reader.
I'm not asking you to update any Adobe Acrobat installation... this can be quite costly. I am going to insist that you update your Adobe Reader software.
Then use the Reader for viewing PDF files - you can use the Acrobat software for your other needs.

Please download the current version of Adobe Reader...Copyright © Adobe Systems Inc.
Please UNCHECK the box for the: Free McAfee® Security Scan Plus.

1. Click the yellow Download now button. If you don't already have Adobe DLM... you may receive a prompt.
   Adobe DLM software removal instructions available here, if wanted.
2. The Adobe installer will check your system and begin the installation process. Use the default installation parameters.
3. When the installation is complete, please Close and re-open your Internet browser.

Adobe Reader X - recommended (safety) program settings
When the program is open, click on Edit and select Preferences. In the categories below, use these settings:

• Javascript - Uncheck Enable Acrobat Javascript.
• Security (Enhanced) - Uncheck Automatically trust sites from my Win OS security zones.
• Secure Trust Manager- Uncheck Allow opening of non-PDF file attachments with external applications.

Step 4.
Please update your Skype software - the latest version is 5.9.0.115
Open the Skype, click to Help -> Check for Updates..., then follow prompts.

Step 5.
ComboFix - Cleanup

1. Click Start -> All Programms -> Accessories and select Run from the menu.
2. Copy and paste the following into the text entry box:
   Combofix /Uninstall
3. Click the OK button. (See image below as reference.)

Step 6.
OTL - Run Fix Script
You should still have OTL on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.

1. Right click on OTL.exe select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
2. Copy and Paste the following code into the text box. Do not include the word Code
   
   Code:
   :Commands
   [EMPTYTEMP]
   [CLEARALLRESTOREPOINTS]
   
   
   
3. Click under the Custom Scan/Fixes box and paste the copied text.
4. Click the Run Fix button. If prompted... click OK.
5. OTL may ask to reboot the machine. Please do so if asked.

Step 7.
OTL-Cleanup

1. Right click on OTL.exe select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
2. Press the CleanUp button.
3. When done, you will be prompted to reboot your system to finish file removal, please select OK to reboot your computer.

Then please don't forget to enable all your defense software!

Finally, please click HERE to find a short guide to staying safer online.

Please don't hesitate to ask any additional questions.

Stay Safe!
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
_________________