Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Hi, have been infected.

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Hi, have been infected.

Unread postby gingernick » April 10th, 2008, 12:04 pm

Only that it has something to do with my Windows XP Media centre. The PC I'm using is a Philips PC & Freevents is a media application for TV, photos & music.
gingernick
Regular Member
 
Posts: 20
Joined: April 3rd, 2008, 4:25 pm
Advertisement
Register to Remove

Re: Hi, have been infected.

Unread postby dan12 » April 11th, 2008, 5:39 am

UNINSTALL COMBOFIX

  • Click START then RUN
  • Now type Combofix /u in the runbox and click OK.
  • Note the space between the X and the U, it needs to be there.
  • Image
You can also delete any logs we have produced, and empty your Recycle bin.


Close all windows and try typing this command directly in and see if ComboFix runs.

Remember to use the " marks and there is a space between exe" and /killall

Start > Run > type "%userprofile%\desktop\combofix.exe" /killall

If ComboFix runs, please post the log.

Let me know when done :)
User avatar
dan12
MRU Honors Grad Emeritus
 
Posts: 6123
Joined: March 30th, 2006, 3:22 am
Location: Leicestershire

Re: Hi, have been infected.

Unread postby gingernick » April 11th, 2008, 9:56 am

Hi Dan, sorry to be a pain but how do I uninstall Combofix? It's not on the Start/all programs list nor is it in the Control panel add/remove programs list. I don't want to delete it without asking you first!
gingernick
Regular Member
 
Posts: 20
Joined: April 3rd, 2008, 4:25 pm

Re: Hi, have been infected.

Unread postby gingernick » April 11th, 2008, 9:58 am

Please ignore last post!
gingernick
Regular Member
 
Posts: 20
Joined: April 3rd, 2008, 4:25 pm

Re: Hi, have been infected.

Unread postby gingernick » April 11th, 2008, 10:11 am

Hi Dan, did what you asked and ComboFix didn't run, but I have on C:/ drive a folder called ComboFix containing an application named CF19593 and a CFEXE file called nircmd.cfexe should I delete the ComboFix folder containing these items?
gingernick
Regular Member
 
Posts: 20
Joined: April 3rd, 2008, 4:25 pm

Re: Hi, have been infected.

Unread postby dan12 » April 11th, 2008, 10:22 am

Yes, you can delete that folder.
User avatar
dan12
MRU Honors Grad Emeritus
 
Posts: 6123
Joined: March 30th, 2006, 3:22 am
Location: Leicestershire

Re: Hi, have been infected.

Unread postby dan12 » April 11th, 2008, 1:05 pm

Congratulations you are clean! :)
Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

Create a new System Restore Point
This is a good time to clear your existing system restore points and establish a new clean restore point:
  • Go to Start > All Programs > Accessories > System Tools > System Restore
  • Select Create a restore point, and Ok it.
  • Next, go to Start > Run and type in cleanmgr
  • Select the More options tab
  • Choose the option to clean up system restore and OK it.
This will remove all restore points except the new one you just created.

Here are some free programs I recommend that could help you improve your computer's security.

Spybot Search and Destroy 1.5.2
Download it from here. Just choose a mirror and off you go.
Find here the tutorial on how to use Spybot properly here
Find here changes from older version 1.4 here

Install Spyware Guard
Download it from here
Find here the tutorial on how to use Spyware Guard here

Install SpyWare Blaster
Download it from here
Find here the tutorial on how to use Spyware Blaster here

Install WinPatrol
Download it from here
Here you can find information about how WinPatrol works here

Install FireTrust SiteHound
You can find information and download it from here

Install MVPS Hosts File from here
The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer.
Find Tutorial here : http://www.mvps.org/winhelp2002/hosts.htm

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com

Please check out Tony Klein's article "How did I get infected in the first place?"

Read some information here how to prevent Malware.

Stand Up and Be Counted!
Please take the time to tell us what you would like to be done about the people who are behind all the problems you have had. We can only get something done about this if the people that we help, like you, are prepared to complain. We have a dedicated forum for collecting these complaints called Malware Complaints. Please register there first! Then follow the instructions.

>> Here << you can see how you can help us.

Happy safe surfing!

Dan
User avatar
dan12
MRU Honors Grad Emeritus
 
Posts: 6123
Joined: March 30th, 2006, 3:22 am
Location: Leicestershire

Re: Hi, have been infected.

Unread postby gingernick » April 11th, 2008, 1:55 pm

Hi Dan, many thanks for your help & patience, Nick.
gingernick
Regular Member
 
Posts: 20
Joined: April 3rd, 2008, 4:25 pm

Re: Hi, have been infected.

Unread postby dan12 » April 11th, 2008, 5:29 pm

Your welcome :)
User avatar
dan12
MRU Honors Grad Emeritus
 
Posts: 6123
Joined: March 30th, 2006, 3:22 am
Location: Leicestershire

Re: Hi, have been infected.

Unread postby Gary R » April 12th, 2008, 3:47 am

This topic is now closed.

If you are the originator of this topic, and you need it re-opened please send an email to 'admin at malwareremoval.com', including a link to this topic.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

Gary R
User avatar
Gary R
Administrator
Administrator
 
Posts: 25888
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 168 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware