Multiple Issues

[mjq424]

Hi
Some of those detections are generic detections of ComboFix (some Antivirus find risks in it)

Using Windows Explorer by right-clicking the Start button and left clicking Explore navigate to and find the following files: if found, delete the following (some may not be present after previous steps):

F:\Programs\Nero 8 Ultra Edition 8.2.8.0+Keymaker\Nero-8.2.8.0_eng_trial.exe
F:\Programs\SpySweeper5.5-FULL\SpySweeper 5.5.exe <-- This is a compromised (hacked) version of this software! If you want to use it please download it from the official website!

Let's clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if used inappropriately.


UNINSTALL COMBOFIX

• Click START then RUN
• Now type Combofix /u in the runbox and click OK.
• Note the space between the X and the U, it needs to be there.
• 

You can also delete any logs we have produced, and empty your Recycle bin.

Download OTMoveIt2 by OldTimer to your Desktop.

• Double click OTMoveIt2.exe to launch it.
• Click on the CleanUp! button.
• OTMoveIt will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
• You will be prompted to allow the clean up procedure, click Yes
• When finished exit out of OTMoveIt2
• Now delete OTMoveIt2.exe (if still present)

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

1. Disable and Enable System Restore. - If you are using Windows ME/XP/Vista then you should disable and re-enable system restore to make sure there are no infected files found in a restore point.
   
   Reset System Restore.
   Now you should disable System restore to purge any infected files and then re-enable it,
   
   On the Desktop, right-click My Computer.
   Click Properties.
   Click the System Restore tab.
   Check Turn off System Restore.
   Click Apply, and then click OK.
   Restart your computer
   
   Turn ON System Restore
   
   On the Desktop, right-click My Computer.
   Click Properties.
   Click the System Restore tab.
   Un-Check Turn off System Restore.
   Click Apply, and then click OK.
   
2. Make your Internet Explorer more secure - This can be done by following these simple instructions:
   1. From within Internet Explorer click on the Tools menu and then click on Options.
   2. Click once on the Security tab
   3. Click once on the Internet icon so it becomes highlighted.
   4. Click once on the Custom Level button.
      
      1. Change the Download signed ActiveX controls to Prompt
      2. Change the Download unsigned ActiveX controls to Disable
      3. Change the Initialise and script ActiveX controls not marked as safe to Disable
      4. Change the Installation of desktop items to Prompt
      5. Change the Launching programs and files in an IFRAME to Prompt
      6. Change the Navigate sub-frames across different domains to Prompt
      7. When all these settings have been made, click on the OK button.
      8. If it prompts you as to whether or not you want to save the settings, press the Yes button.
   5. Next press the Apply button and then the OK to exit the Internet Properties page.
3. Update your Anti Virus Software - It is imperitive that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.
   
4. Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
   
5. Install WinPatrol - Download and install Winpatrol by BillP Studios.
   This program can monitor what software start with Windows. You can delay startup for some programs and stop malicious programs from starting up. It can also view some hidden files.
   Download it from here
   
6. Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. A article on anti-malware products with links for this program and others can be found here:
   Computer Safety on line - Anti-Malware
   
7. Install ThreatFire - Download and install ThreatFire. This program defends against malware by detecting certain malicious behaviours. It is configured "out-of-the-box" and acts as a complement to your Antivirus software. It can be downloaded here:
   PC Tools ThreatFire
   
8. Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

[Jaymie1989]

F:\Programs\Nero 8 Ultra Edition 8.2.8.0+Keymaker\Nero-8.2.8.0_eng_trial.exe
F:\Programs\SpySweeper5.5-FULL\SpySweeper 5.5.exe <-- This is a compromised (hacked) version of this software! If you want to use it please download it from the official website!

I found them and removed them

Let's clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if used inappropriately.

I have removed programs such as Spysweeper, Counterspy and various other problems and I have brought and installed Kaspersky Anti-Virus and im just using that, AVG Anti-Spyware, Spybot Search and destroy and just Ad-Aware Free Edition.

I am installing Spyware blaster.

Is all that ok? Has that bug been removed?

Also, I know that alot of registry cleaners can be bad for the system, but is there one that you can recommend to me? I have looked at alot of comparison websites and read reviews in official Windows magazine and from what i have found RegCure is the best.

[mjq424]

I am installing Spyware blaster.

Is all that ok? Has that bug been removed?

I'm sorry I don't quite get what you mean here.

[Jaymie1989]

The bug that you said i have. Has it been removed?

Also could you recommend a registry cleaner please

[mjq424]

Hi
Well, as I said earlier, backdoor trojans can change all kinds of settings on your machine that we won't see as part of our analysis. However, there are no overt signs of infection in any of your logs that would point to infection.

I'm afraid I personally cannot recommend using any registry cleaner as they can corrupt all kinds of settings on your system if badly written. The choice is up to you. But if you do choose to use one then I suggest you find one that suits your needs and that you are comfortable with.
Hope that helps

[Jaymie1989]

Thanks, Thats helped alot

[Simon V.]

This topic is now closed.

If you are the originator of this topic, and you need it re-opened please send an email to 'admin at malwareremoval.com', including a link to this topic.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the username used. If the username does not match the one in the thread linked, the email will be deleted.