help with malware removal

[patsak]

Actually, my system is moving well now.

i am posting this before i reboot my system. Do you want me to repost this otmoveit report? If my system is completely cleared of this spyware, virus, or whatever it was, do I leave on all the desktop files you wanted me to download to my computer?Thanks ever so much for your expert advice and help. i really panicked when this happen afew days ago.

C:\WINDOWS\002275_.tmp moved successfully.
File move failed. C:\QUARANTINE\Av-test.txt.Vir scheduled to be moved on reboot.
File/Folder not found.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05062008_121504

[dan12]

we will clean those up shortly ,you can re-boot and see if your given a otmoveit report.

[patsak]

THe OTMoveit2 file reran on the reboot so here is the results.
Also, i have about 84 updates from microsoft which are downloaded but will not install. when i put SEvice pack 2 back on my computer, all those updates downloaded. But i don't know the reason why they won't install unless the spyware had something to do with it. Do you know anything about this at all?



C:\WINDOWS\002275_.tmp moved successfully.
File move failed. C:\QUARANTINE\Av-test.txt.Vir scheduled to be moved on reboot.
File/Folder not found.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05062008_121504

Files moved on Reboot...
File move failed. C:\QUARANTINE\Av-test.txt.Vir scheduled to be moved on reboot.

[dan12]

Have you emptied your a\v quarantined folder lately?

Could you try it again for me please your getting an old hand at this!

We need to reveal system folders

• Close all programs so that you are at your desktop.
• Double-click on the My Computer icon.
• Select the Tools menu and click Folder Options
• After the new window appears select the View tab.
• Place a checkmark in the checkbox labeled Display the contents of system folders
• Under the Hidden files and folders section select the radio button labeled Show hidden files and folders
• Remove the checkmark from the checkbox labeled Hide file extensions for known file types
• Remove the checkmark from the checkbox labeled Hide protected operating system files
• Press the Apply and then the ok button and shut down my computer
• Now your computer is configured to show all hidden files.
• For you and the tools to be able to see appropriate files we need to Show Hidden Files

• Double-click OTMoveIt2.exe to run it.
  
• Copy the lines in the codebox below.
  

Code: Select all

C:\QUARANTINE\Av-test.txt.Vir
    

• Return to OTMoveIt2, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
  

• Click the red Moveit! button.
  
• Copy everything in the Results window (under the green bar), and paste it in your next reply.
  
• Close OTMoveIt2
  

Post the report
dan

[patsak]

Ok, here is the next one. have fun!

ile/Folder C:\QUARANTINE\Av-test.txt.Vir not found.
File/Folder not found.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05062008_170920

[dan12]

Double click on OTMoveIt2.

Click on CleanUp!.

You will receive a prompt that it has finished downloaded a list. Click OK.

After this, it will prompt you to restart your computer. Please restart your computer.


Now you can make your hidden files hidden again.

• Go to My Computer
• Select the Tools menu and click Folder Options
• Click the View tab.
• Checkmark the "Display the contents of system folders"
• Under the Hidden files and folders select "Show hidden files and folders"
• Check "Hide protected operating system files"
• Click Apply and then the OK and close My Computer.

You look good to go

Let me know this went ok and its taken care of the tools we used

[patsak]

There are afew things that didn't come off my desktop:

ccleaner
fixme.reg
mbam-setup
malwarebytes antimalware
An extra internet explorer

Do i need to keep any of what i downloaded from you?

Thank you again ,I wouldn't have been able to fix this spyware/virus/malware without your help. YOu save me alot of headaches!

[dan12]

ccleaner << A good program to keep for maintenance of your pc
fixme.reg << You can delete this empty recycle bin
mbam-setup << you can delete this also
malwarebytes antimalware << A good program to keep, update new definitions on a regular basis.
An extra internet explorer << I'm not too sure where this came from. is it a shorcut

[patsak]

Thanks again for all your help and the programs to help my computer stay clean!! Have a wonderful day!

[dan12]

Well done for sticking at it!

Congratulations you are clean!
Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

Create a new System Restore Point
This is a good time to clear your existing system restore points and establish a new clean restore point:

• Go to Start > All Programs > Accessories > System Tools > System Restore
  
• Select Create a restore point, and Ok it.
  
• Next, go to Start > Run and type in cleanmgr
  
• Select the More options tab
  
• Choose the option to clean up system restore and OK it.
  

This will remove all restore points except the new one you just created.

Here are some free programs I recommend that could help you improve your computer's security.

Spybot Search and Destroy 1.5.2
Download it from here. Just choose a mirror and off you go.
Find here the tutorial on how to use Spybot properly here
Find here changes from older version 1.4 here

Install Spyware Guard
Download it from here
Find here the tutorial on how to use Spyware Guard here

Install SpyWare Blaster
Download it from here
Find here the tutorial on how to use Spyware Blaster here

Install WinPatrol
Download it from here
Here you can find information about how WinPatrol works here

Install FireTrust SiteHound
You can find information and download it from here

Install MVPS Hosts File from here
The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer.
Find Tutorial here : http://www.mvps.org/winhelp2002/hosts.htm

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com

Please check out Tony Klein's article "How did I get infected in the first place?"

Read some information here how to prevent Malware.

Stand Up and Be Counted!
Please take the time to tell us what you would like to be done about the people who are behind all the problems you have had. We can only get something done about this if the people that we help, like you, are prepared to complain. We have a dedicated forum for collecting these complaints called Malware Complaints. Please register there first! Then follow the instructions.

>> Here << you can see how you can help us.

Happy safe surfing!

Dan

[NonSuch]

Patsak, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.