This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

My computer is infected with malware-virus

61 min read

This thread's last reply is from July 19, 2010, 11:52 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

xixo_12
July 19, 2010, 6:03 AM UTC
Hi,
Kaspersky scan log looking good.

I would like to ask you if Avast antivirus is OK or should I change into something better (free antivirus).

As long you have updated antivirus, nothing to worry about.

Also I would like to know if I can use any of the programs we used during the session such as MBAM.Or should I uninstall - delete them.

You could keep MBAM as your favourite software ;) Other than that, I will guide you how to uninstall them later ;)

Something else that has ocuured is that when i change the volume with the buttons on my Microsoft Multimedia Keyboard, I do not have any response and I get the message :
"Microsoft IntelliType Pro has encountered a problem and needs to close. We are sorry for the inconvenience."
Is there something I can do? (I am also using the REALTEK drivers and sound control provided by the manufacturer of my onboard sound card.)

We're focus on malware removal. Your question related to hardware/system problem. I will send you to other forum that handle this issue later :)

and.. You're most welcome ;)

Any other question/problem before final instructions?
kokats
July 19, 2010, 8:42 AM UTC
The only question I have is what to do with this :
(from Kaspersky log)
File name / Threat / Threats count
C:\System Volume Information\_restore{2A6D69F9-6716-4D4A-A3AB-ECB1435DE23B}\RP66\A0020295.rbf Infected: Trojan-Downloader.Win32.AutoIt.mk 1

And also I would like you to inform me about programs that I can use apart from the Avast-windows Defender- Mbam so I can be safe.
WinPatrol maybe?? any recomendation about an extra firewall or using the windows firewall is OK?

Thank you again! waiting for the final instructions...
xixo_12
July 19, 2010, 10:37 AM UTC
Good! :thumbright:
Your system now is clean.
Let's do some cleaning and management.
These instructions will cover all about your doubt ;)

First,
Uninstall Combofix
  • Click on Start >> Run...
  • Now type in ComboFix /Uninstall into the and click OK.
  • Note the space between the X and the /Uninstall, it needs to be there.


Next,
DeFogger - Enable
  • double click DeFogger to run the tool.
  • The application window will appear
  • Click the Re-enable button to re-enable your CD Emulation drivers
  • Click Yes to continue
  • A 'Finished!' message will appear
  • Click OK
  • DeFogger will now ask to reboot the machine - click OK. If nothing appear, please do reboot manually.
.
IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_enable which will appear on your desktop.

Your Emulation drivers are now re-enabled.

Next,
OTM - CleanUp!
  • Double Click on OTM.exe.
  • Click on CleanUp!.
  • Select Yes when the "Begin cleanup Process?" prompt appears.
  • If you are prompted to Reboot during the cleanup, select Yes.
  • The tool will delete itself once it finishes, if not delete it by yourself.


Next,
clear system restore points.
This is a good time to clear your existing system restore points and establish a new clean restore point:
  • Go to Start > All Programs > Accessories > System Tools > System Restore
  • Select Create a restore point > Click Next > Put the description as you wish > Click Create.
  • Next, go to Start > Run and type in cleanmgr
  • choose your root drive ( normally C: ) and click Ok.
  • after it calculates how much space you will save it will open up a new window
  • Select the More options tab at the top of the window
  • Choose the option to clean up system restore and click yes.
  • Go back to the Disk Cleanup tab.
  • Put a checkmark in all - except compress old files (leave this unchecked).
  • Click Ok then click Yes

This will remove all restore points except the new one you just created and clean unneeded files

Next,
You can proceed to delete remaining tools that involved in this process (if any).

Additional Information :

SpywareBlaster.
  • SpywareBlaster help your Internet Explorer more strong as it will help to block known malicious ActiveX
  • A tutorial on installing & using this product can be found HERE


Antivirus.
  • Antivirus help you to give the maximum protection for the system.
  • You are advice to have only ONE antivirus running on the system.
  • Please keep it update regurlarly.


Malwarebytes' Anti-Malware.
  • Malwarebytes' Anti-Malware is a new and powerful anti-malware tool
  • Only realtime protection need to pay.
  • Tutorial on installing & using this product can be found below:


WinPatrol.
  • Unwanted things always occur behind your knowledge. Let's this software take the snapshot of it.
  • For more information and installation can be found HERE


Windows/Program Update.
Please make sure to have your Windows Automatic Update turn ON or you can do it manually.
Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office products loopholes and fix any bugs found. Install the updates immediately if they are found.
To update Windows
  • Go to Start > All Programs > Windows Update

To update Office
  • Open up any Office program.
  • Go to Help > Check for Updates


You always can refer at both website to check either any updates are needed for your system.
  • Secunia Software Inspector
  • F-secure Health Check


Firewall
If you are using the built-in Windows XP firewall it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to phone home for more instructions. Simply put Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time.

Firewalls protect against hackers and malicious intruders.

I would recommend to install a free firewall for personal use from one of these excellent vendors. Choice is yours:
  • Online-Armor Free
  • Agnitum
  • Sunbelt/Kerio
  • Jetico Personal Firewall
  • Comodo (Uncheck during installation : Install Comodo SafeSurf.., Make Comodo my default search provider and Make Comodo Search my homepage and install firewall ONLY!)


Information.


Safe surfing! :)

==========

Additional.
If you need further assistance, I would refer you to one of the Systems/Hardware forums here:

Good System/Hardware Help Forums


You may need to do free registration in order to post at their forum ;)
Good luck!
kokats
July 19, 2010, 1:46 PM UTC
Hi,
Thank you again for the help, words are not enough...
I installed all the programs you suggested (online armor, winpatrol, spywareblaster) and everything is OK.
I cannot see the page # Please check out Tony Klein's article "How did I get infected in the first place?"
It says : You are not authorised to read this forum....
Please tell me about the hardware/system problems forum.

Thanks again.
Be always well and help others...
Cheers!
Kostis
xixo_12
July 19, 2010, 2:00 PM UTC
Hi,

Here is another link :
"How did I get infected in the first place?"

Please tell me about the hardware/system problems forum.

Have a look on the bottom (my previous post) ;)

If you don't have any questions further, I will ask this topic to be close soon.
Stay safe ;)
kokats
July 19, 2010, 4:06 PM UTC
We are OK you can close the topic...

Stay safe too!

THANK YOU!!!!
jmw3
July 19, 2010, 11:52 PM UTC
As your problems appear to have been resolved,