Hi
Time to declare victory!
Good stuff
Clean Up Now we need to clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if used inappropriately.Remove ComboFixThe following will implement some cleanup procedures as well as reset System Restore points:
Click
Start > Run then copy/paste the following bolded text into the Run box and click OK:
ComboFix /u- Double-click OTM
- Click the CleanUp! button
- Select Yes when the Begin cleanup Process? prompt appears
- If you are prompted to Reboot during the cleanup, select Yes
- The tool will delete itself once it finishes, if not delete it yourself
You can delete the following from your desktop:
DDS.scr
The Gmer.exe file (it will be randomly named .exe file)
GooredFix.exe
GooredFix Backups Folder (will be on your desktop)
RootRepeal.zip file
RootRepeal.exe
Any logs that may have been saved to your desktopIf you haven't already done so, open
Malwarebytes' Anti-Malware, click
Quarantine then
Delete All. Close the program.
You can uninstall both the Eset & Kaspersky Online Scanners - you can do this via
Add or Remove ProgramsYou should also remove
HijackThis. You can do this by going to
C:\Program Files\Trend Micro\HijackThis- Double click HijackThis.exe
- From the Main menu click Open the Misc Tools section
- Using the scroll bar, scroll down to Uninstall HijackThis
- Click Uninstall HijackThis & exit then click Yes at the prompt
Just going through your list of installed programs I notice you have some older versions of McAfee installed:
McAfee VirusScan
McAfee VirusScan v4.0.2 (Retail/OEM)You should really uninstall those if you no longer user them.
All CleanCongratulations, good work, your system is now clean. Now that your system is safe we would like you to keep it that way.
Take the time to follow these recommendations & it will greatly reduce the risk of further infections and greatly diminish the chances of you having to visit here again.
Create a Clean System Restore Point Create a new, clean System Restore point which you can use in case of future system problems:
Press
Start->All Programs->Accessories->System Tools->System RestoreSelect
Create a restore point, then
Next, type a name like
All Clean then press the
Create button and once it's done press
CloseNow remove old, infected System Restore points:
Next click
Start->Run and type
cleanmgr in the box and click
OKEnsure the boxes for
Temporary Files &
Temporary Internet Files are checked. You can choose to check other boxes if you wish but they are not required.
Select the
More Options tab, under
System Restore click
Clean up... and click
Yes to the prompt
Click
OK and
Yes to confirm.
Microsoft Windows UpdateMicrosoft releases patches for Windows and Office products regularly to patch up Windows and Office products loopholes and fix any bugs found. Install the updates immediately if they are found.
To update WindowsGo to
Start >
All Programs >
Windows UpdateTo update OfficeOpen up any Office program.
Go to
Help >
Check for UpdatesMalwarebytes' Anti-MalwareMalwarebytes' Anti-Malware is a new and powerful anti-malware tool. It is totally free but for real-time protection you will have to pay a small one-time fee.
You can find a tutorial
here. Keep it updated & run it regularly.
SpywareBlasterDownload and install Javacools SpywareBlaster from
here SpywareBlaster adds a list of ActiveX controls, tracking cookies and sites which will be blocked in either Internet Explorer or Firefox browsers. You need to manually check for updates regularly.
Download and Install a HOSTS FileA HOSTS file is a big list of bad web sites. The list has a specific format, a specific name, (name is just
HOSTS with no file extension), and a specific location. Your machine always looks at that file in that location before connecting to a web site to verify the address. So the HOSTS listing can be used to "short circuit" a request to a bad website by giving it the address of your own machine.
Download BlueTack's HOSTS Manager here, using Internet Explorer (Firefox won't work):
- A short distance down the page in the centre, click on the Download button
- Agree to the license
- On the next page, to the right side of where it says Download Estimates, right click on the underlined word Hosts Manager choose Save Target As and download the installer Hosts20setup.exe to your desktop
- Double click the Installer on your desktop and let it Install the Hosts Manager
- After the installation is complete, click on the Hosts Manager icon on your desktop. (You can delete the other Hosts Switch icon from your desktop)
- When the Hosts Manager comes up, click the small down arrows on the right side of the bar labeled Options and Tools,
- Click Disable DNS Service. This is important
- In the Left Pane, click Download
- It will load 80,000 lines or more. When it finishes, also in the left pane, click Replace, and then click Save
You can use this manager to handle your HOSTS file download, edits, and most any other HOSTS issue.
If you have a separate party firewall or Winpatrol, you may have to give permissions at various times to Unlock the present default HOSTS file and install the new one.
Web of TrustWOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
- Green to go
- Yellow for caution
- Red to stop
WOT has an addon available for both Firefox and Internet Explorer.
Install WinPatrolDownload it
hereYou can find information about how WinPatrol works
hereRead some information here on how to prevent Malware.
Hopefully these steps will help keep your computer clean.
Stand Up and Be Counted ---> Malware Complaints <--- where you can make difference!The site offers people who have been (or are) victims of malware the opportunity to document their story and, in that way, launch a complaint against the malware and the makers of the malware.
If there are any other questions then feel free to ask or in future do not hesitate to contact us here at
The Malware Removal Forums