Forum Home |  MWR University |  New to the Board? |  IRC Chatroom |  Who Runs This Site? |  ASAP Members |  Microsoft MVP Members |  Downloads |  Good & Bad P2P Programs |  Our Rules

MalWare Removal Forum

Malware Removal University - Teaching people how to support those with infected computers - Teaching them to never give up untill your computer is clean and secure.

Tutorials (etc.) : Boot to Safe Mode - Safely - What to do if your Computer's running slowly
It is currently Sat 18 May, 2013 1:20 pm

All times are UTC [ DST ]


Forum rules


Please read > >THIS ANNOUNCEMENT< < before posting your NEW topic about your problem.

Please do NOT reply to your topic until a staff member has responded as they are looking for topics that have ZERO replies.

Paste your logs into your post. DO NOT USE ATTACHMENTS! Logs posted as attachments will be ignored and the topic will be closed.

If no expert has replied after 3 days, and you still require assistance, please post in our 72 hour bump room > > CLICK HERE < < Please do NOT reply to your own topic in an attempt to "bump" it. Bumped topics will be closed, requiring you to start again from the beginning.

If you are being helped and you haven't replied to your helper within 3 days of their last post, your topic will be closed as inactive. If that happens, you will need to start a new topic when you have the time available to promptly complete all instructions.

If your topic has been closed due to inactivity, do NOT request that your topic be reopened - we do NOT reopen topics unless they have been closed in error - you will need to start a NEW topic with NEW DDS logs. Do NOT attempt to start a new topic with a post that is essentially a reply to your closed topic.



Post new topic This topic is locked, you cannot edit posts or make further replies.  [ 51 posts ]  Go to page Previous  1, 2, 3, 4
Author Message
 Post subject: Re: Malware "Windows Home Protector"
New postPosted: Sat 11 Aug, 2012 3:28 pm 
Offline
Retired Graduate
User avatar

Joined: Mon 04 Jan, 2010 12:03 am
Posts: 1004
Hi reallyfreespirit,

My apologies I hadn't realised that Windows Vista uses a different method than Windows 7 to clean up system files. Updated instructions below.

Now remove old, infected System Restore points:
  1. Click Start >> in the Search Programs and Files search box type cleanmgr and press OK
    • If you are prompted to select which files to cleanup select Files from all users on this computer.
  2. Select the C: drive and click OK.
  3. Ensure the following boxes are checked;
    • Recycle Bin
    • Temporary Files
    • Temporary Internet Files
  4. Windows 7 users only - select the Clean Up System Files button.
    • Select the C: drive again and select OK.
  5. Select the More Options tab and under System Restore and Shadow Copies click the Clean up button.
  6. Select Delete, Press OK and Delete Files to confirm

Let me know if these instructions worked for you.

diver79.

Top
 Profile E-mail  
 
 Post subject: Re: Malware "Windows Home Protector"
New postPosted: Sun 12 Aug, 2012 4:17 am 
Offline
Regular Member

Joined: Sat 21 Jul, 2012 10:14 pm
Posts: 29
It didn't happen quite as the sequence you provided. I think it did complete, as the Recycle Bin is empty and the Clean Up box disappeared after the OK in instruction #6. What else should I look at to confirm?

Another question:
Some time back an MBR.dat file and an aswMBR application file and text file was created and remains in my Downloads directory. Should these be saved or deleted? If I recall, I saved the files on a USB drive, but want to confirm that they might be of future use.
_________________


Top
 Profile E-mail  
 
 Post subject: Re: Malware "Windows Home Protector"
New postPosted: Sun 12 Aug, 2012 8:29 pm 
Offline
Retired Graduate
User avatar

Joined: Mon 04 Jan, 2010 12:03 am
Posts: 1004
Hi reallyfreespirit,

You can view your system restore points using the instructions below. You should only have restore points from after you ran the cleanup.

  • Click the Start Button > All Programs > Accessories > System Tools > System Restore
  • Click Next at the Restore System Files and settings window.
  • You should now be able to view your current restore points. Note: Do not continue with the restore process. Click cancel once you have verified your available restore points.

Re: MBR.dat
This file is a backup of your master boot record. Some infections target this area of the computer as it loads before the Operating System loads. Having a backup is a good idea. You can delete the file from the desktop if you already have it stored on USB.

I will leave the topic open for another day to allow you respond with any questions you may have.

diver79

Top
 Profile E-mail  
 
 Post subject: Re: Malware "Windows Home Protector"
New postPosted: Sun 12 Aug, 2012 9:12 pm 
Offline
Regular Member

Joined: Sat 21 Jul, 2012 10:14 pm
Posts: 29
Restore points appear only as 8/11 and 8/12, which are correct and the only ones that should be there.
Yes, I have saved the MBR.dat file on a USB drive.

Many thanks for your great assistance in resolving my malware issues.
I will install malware protection and continue with completing a backup process.

Hopefully, I will be smart enough to avoid any future issue such as this.
_________________


Top
 Profile E-mail  
 
 Post subject: Re: Malware "Windows Home Protector"
New postPosted: Sun 12 Aug, 2012 9:18 pm 
Offline
Retired Graduate
User avatar

Joined: Mon 04 Jan, 2010 12:03 am
Posts: 1004
reallyfreespirit wrote:
Restore points appear only as 8/11 and 8/12, which are correct and the only ones that should be there.
Yes, I have saved the MBR.dat file on a USB drive.
Good.

reallyfreespirit wrote:
Many thanks for your great assistance in resolving my malware issues.
I will install malware protection and continue with completing a backup process.
You're most welcome.

reallyfreespirit wrote:
Hopefully, I will be smart enough to avoid any future issue such as this.
Yes, hopefully. I linked to this earlier but you may not have read it. It should help Computer Security - a short guide to staying safer online

Top
 Profile E-mail  
 
 Post subject: Re: Malware "Windows Home Protector"
New postPosted: Mon 13 Aug, 2012 3:40 am 
Offline
Administrator
Administrator
User avatar

Joined: Wed 23 Feb, 2005 12:08 pm
Posts: 25090
Location: California
As this issue appears to be resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.

Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic This topic is locked, you cannot edit posts or make further replies.  [ 51 posts ]  Go to page Previous  1, 2, 3, 4

All times are UTC [ DST ]


Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.

Member site: Alliance of Security Analysis Professionals | UNITE Against Malware

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group