Rootkit.Agent: ntndis.sys & ipsecndis.sys

[TAGScorpioN]

Thank you very much for your reply. Thanks to your instructions on the Java update I noticed I three(!!) redundant versions installed gobbling up valuable space on my c:\ drive. Feels like my PC is getting a complete overhaul ;-)

Here's the OTL log:

========== FILES ==========
File\Folder F:\Games\PC\F.E.A.R\update\crack\FEAR.exe moved successfully.
F:\Programs\BSPlayer Pro v2.28.964 Multilanguage - Incl. Key\BS.Player.Pro.v2.28.964.exe moved successfully.
F:\Programs\BSPlayer Pro v2.28.964 Multilanguage - Incl. Key\BSPlayer Pro v2.28.964 Multilanguage - Incl. Key.rar moved successfully.
F:\Programs\daemon408-x86.exe moved successfully.
F:\Programs\rexbackup file system settings\BR-070721-00\BR-070721-00.exe moved successfully.
F:\Schijf dump\laptop\Software Download\Programs\CleanMyPC_Registry_Cleaner_v2[1].16.zip moved successfully.
F:\Schijf dump\laptop\Software Download\Programs\daemon408-x86.exe moved successfully.
F:\Schijf dump\laptop\Software Download\Programs\FlashFXP.3.0.Cracked-EQUiNOX.(Zekond-Torrent).zip moved successfully.
G:\CFA\ExamForce.CFA.Institute.CFA.2006.Level.I.CramMaster.v1.6-RBS.zip moved successfully.
G:\CFA\Exams\ExamForce.CFA.Institute.CFA.2007.Level.I.CramMaster.v1.4-RBS.zip moved successfully.

OTL by OldTimer - Version 3.2.9.1 log created on 08142010_170956

[deltalima]

Hi TAGScorpioN,

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure

Remove GMER

Delete the GMER icon from your desktop, it will be named cnklsmcv.exe


Uninstall ComboFix

• Click START then RUN
  
• Now type Combofix /Uninstall in the runbox and click OK

Clean up with OTL

• Double-click OTL.exe to start the program. This will remove all the tools we used to clean your pc.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CleanUp! button
• Say Yes to the prompt and then allow the program to reboot your computer.

Update your AntiVirus Software and keep your other programs up-to-date
Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Security Updates for Windows, Internet Explorer & Microsoft Office
Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the Microsoft Update site on a regular basis.


Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware


Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.Follow this list and your potential for being infected again will reduce dramatically.

Here are some additional utilities that will enhance your safety

• MVPS Hosts file <= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer
• Winpatrol <= Download and install the free version of Winpatrol. a tutorial for this product is located here:
  Using Winpatrol to protect your computer from malicious software

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place

Happy surfing and stay clean!

[NonSuch]

As this issue appears to be resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.