antimalware doctor problem

[xixo_12]

No worries,
take your own time to do it.

[helomech]

Have tried Kaspersky twice now. It downloads and updates OK, but freezes up wile doing the scan. I don't have any Anti-Virus software installed. When the run program window comes up, it states that there is an error in Kaspersky's program signature (or something like that?)

I will leave it running for now to see if it eventually finishes. I started running it @ 5am where I am so there should be plenty of bandwidth(?) at this time.

Is there another scanner I can use?

Thanks

[xixo_12]

Hi,
Let's try this

First,
No Antivirus!.

• Antivirus help you to give the maximum protection for the system.
• You are advice to have only one antivirus running on the system.
• Please consider one of this program and install it now:
  
  • Avast
  • AntiVir
  • Microsoft Security Essentials

Next,
Reboot into the usual account.

Next,
ATF by Atribune
Please run it again.

Next,
ESET Online Scanner
Go here to run an online scannner from ESET.

• Note: You will need to use Internet explorer for this scan
• Turn off the real time scanner of any existing antivirus program while performing the online scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activex control to install
• Click Start
• Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked
• Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked
• Click Scan
• Wait for the scan to finish
• Use notepad to open the logfile located at C:\Program Files\Eset\Eset Online Scanner\log.txt
• Copy and paste that log as a reply to this topic

What you need to post
Checklist.

• Content of log.txt

[helomech]

Eset Log:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# IEXPLORE.EXE=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=9e6d8bce68983a4ea36bf265d864949d
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2010-09-26 10:50:18
# local_time=2010-09-26 03:50:18 (-0800, Pacific Daylight Time)
# country="Canada"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1024 16777215 100 0 0 0 0 0
# compatibility_mode=5891 16776869 100 100 0 15034016 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=76270
# found=1
# cleaned=0
# scan_time=7989
C:\Qoobox\Quarantine\C\Documents and Settings\Mike\Application Data\39395100633A10AE9AF9F51C5D8432B7\upd_debug.exe.vir a variant of Win32/Kryptik.GSP trojan 00000000000000000000000000000000 I

[xixo_12]

Hi,

Good!
Any other problems?

[helomech]

Not at the moment. Everything is working pretty smoothly.

[xixo_12]

Good!
Your system now is clean.
Let's do some cleaning and management.

First,
Uninstall Combofix

• Click on Start >> Run...
• Now type in ComboFix /Uninstall into the and click OK.
• Note the space between the X and the /Uninstall, it needs to be there.
  

Next,
clear system restore points.
This is a good time to clear your existing system restore points and establish a new clean restore point:

• Go to Start > All Programs > Accessories > System Tools > System Restore
• Select Create a restore point > Click Next > Put the description as you wish > Click Create.
• Next, go to Start > Run and type in cleanmgr
• choose your root drive ( normally C: ) and click Ok.
• after it calculates how much space you will save it will open up a new window
• Select the More options tab at the top of the window
• Choose the option to clean up system restore and click yes.
• Go back to the Disk Cleanup tab.
• Put a checkmark in all - except compress old files (leave this unchecked).
• Click Ok then click Yes

This will remove all restore points except the new one you just created and clean unneeded files

Next,
You can proceed to delete remaining tools that involved in this process (if any).

Additional Information :

SpywareBlaster.

• SpywareBlaster help your Internet Explorer more strong as it will help to block known malicious ActiveX
• A tutorial on installing & using this product can be found HERE

Antivirus.

• Antivirus help you to give the maximum protection for the system.
• You are advice to have only ONE antivirus running on the system.
• Please keep it update regurlarly.

Malwarebytes' Anti-Malware.

• Malwarebytes' Anti-Malware is a new and powerful anti-malware tool
• Only realtime protection need to pay.
• Tutorial on installing & using this product can be found below:
  
  • Description and download
  • How to install and run?

WinPatrol.

• Unwanted things always occur behind your knowledge. Let's this software take the snapshot of it.
• For more information and installation can be found HERE

Windows/Program Update.
Please make sure to have your Windows Automatic Update turn ON or you can do it manually.
Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office products loopholes and fix any bugs found. Install the updates immediately if they are found.
To update Windows

• Go to Start > All Programs > Windows Update

To update Office

• Open up any Office program.
• Go to Help > Check for Updates

You always can refer at both website to check either any updates are needed for your system.

• Secunia Software Inspector
• F-secure Health Check

Information.

• Please check out Tony Klein's article "How did I get infected in the first place?"
• Read some information here how to prevent Malware.
• Is your pc running slow? Read What to do if your Computer is running slowly

Safe surfing!

[Gary R]

As your problems appear to have been resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.