Security toolbar, and lots of other creepy stuff.. Help!

Find AWF report by noahdfear ©2006
Version 1.40
Option 3 run successfully

The current date is: Sun 11/11/2007
The current time is: 7:40:11.70


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\MESSEN~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\SKYPE\PHONE\BAK

0 File(s) 0 bytes

Directory of C:\QOOBOX\QUARAN~1\C\PROGRA~1\COMMON~1\WINANT~1\BAK

06/06/2007 09:35 AM 618,496 WAS7Mon.exe.vir
1 File(s) 618,496 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

618496 Jun 6 2007 "C:\qoobox\Quarantine\C\Program Files\Common Files\WinAntiSpyware 2007\bak\WAS7Mon.exe.vir"


end of report

==============================================

By the time the above report came up in notepad, FindAWF was already gone. So, I had to restart it to perform the '4' option. It said something about resetting domain zones and I just said yes. Your instructions didnt mention anything about it, but i am hoping thats ok.



Everything looks ok. Some sites I visited yesterday still spawned popup ads but that always was the case and as soon as I navigated away things became normal.

Is there any way to block a Pop-up for sure? even a desired one, so that unless i right-click on the info bar and allow it, NOTHING gets popped up?
Seems like there ought to be..

Other than that, things are looking good. Thanks a bunch!

Your instructions didnt mention anything about it, but i am hoping thats ok.

That's fine

Some sites I visited yesterday still spawned popup ads

Are you saying it's related to the sites you visit?

Is there any way to block a Pop-up for sure?

You said in your last post that you switched to Firefox. The option to block pop-ups is on by default. Please check that setting: go to Extra > Options.... Under the tab Content, make sure the first option is checked.

Other than that, things are looking good. Thanks a bunch!

You're welcome Here are some tips to stay clean in the future:

Click Start then Run....

• Type Combofix /u in the runbox and click OK. (Note: The space between the x and the /u needs to be there)
  
  
  
• When shown the disclaimer, select 2.

Disable and Enable System Restore - If you are using Windows ME or XP then you should disable and re-enable system restore to make sure there are no infected files found in a restore point.

Step 1: Turn off System Restore:

• On the desktop, right-click My Computer
• Click Properties
• Click the System Restore tab
• Check Turn off System Restore
• Click Apply, and then click OK

Step 2: Reboot your computer.

Step 3: Turn on System Restore:

• On the desktop, right-click My Computer
• Click Properties
• Click the System Restore tab
• Uncheck Turn off System Restore
• Click Apply, and then click OK

Note: Only do this once, NOT on a regular basis!

Make your Internet Explorer More Secure

• From within Internet Explorer click on the Tools menu and then click on Options.
• Click once on the Security tab.
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
  
  • Change the Download signed ActiveX controls to Prompt.
  • Change the Download unsigned ActiveX controls to Disable.
  • Change the Initialise and script ActiveX controls not marked as safe to Disable.
  • Change the Installation of desktop items to Prompt.
  • Change the Launching programs and files in an IFRAME to Prompt.
  • Change the Navigate sub-frames across different domains to Prompt.
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
• Next press the Apply button and then the OK to exit the Internet Properties page.

Update your Anti-Virus Software - It is very imprtant that you update your anti-virus software at least once a week (even more if you wish). If you do not update your anti-virus software then it will not be able to catch any of the new variants that will come out.

Visit Microsoft's Update Site Frequently - It is important that you visit http://update.microsoft.com/ regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Install Spybot - Search and Destroy - Download and install Spybot - Search and Destroy with its TeaTimer option. This will provide real time spyware and hijacker protection on your computer alongside your virus protection. You should scan your computer with the program on a regular basis just as you would with your anti-virus software. A tutorial on installing and using this product can be found here:
Instructions for - Spybot S & D and Ad-aware

Install Ad-Aware - Download and install Ad-Aware. You should scan your computer with the program on a regular basis just as you would with your anti-virus software. A tutorial on installing and using this product can be found here:
Instructions for - Spybot S & D and Ad-aware

Install SpywareBlaster - SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. An article on anti-malware products with links for this program and others can be found here:
Computer Safety on line - Anti-Malware

Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

Stand Up and Be Counted! - Please take the time to tell us what you would like to be done about the people who are behind all the problems you have had. We can only get something done about this if the people that we help, like you, are prepared to complain. We have a dedicated forum for collecting these complaints: Malware Complaints. You have to be registered to post. After registering just find your country room and register your complaint. The infection you had was Vundo (Virtumundo)

>> Here << you can see how you can help us.

The _restore files still seem to exist.. Symantec is still finding viruses in them . How do i get rid of them?

Follow the steps I've outlined (Disable and Enable System Restore). That should delete all restore points. If it doesn't work, please let me know.

That solved the issue with restore files. I also downloaded firewall from ZoneAlarm. The only remaining problem seems to be that I dont get internet access unless i put wireless PCI card (DLink) in the "trusted" category. Hope this is ok.

thanks a million
-sri

The only remaining problem seems to be that I dont get internet access unless i put wireless PCI card (DLink) in the "trusted" category. Hope this is ok.

That's fine

Happy surfing and stay safe!

Glad we could be of assistance.

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.