FSMGMT.dll HijackThis Log

[peku006]

Hi TeamBoghos
Thank you so much for the nice words! (I’m blushing)

There's some malware in your Java cache so lets clear it.

• Press Start
• Go to Control Panel
• Click Java
• Under Temporary Internet Files click Settings...
• Now click Delete files...
• Select both options and click OK
• The temporary files will now be deleted.
• When done click OK twice and close Control Panel

After that...

Congratulations, your log looks clean!

This is a good time to clear your existing system restore points and establish a new clean restore point:

• Go to Start > All Programs > Accessories > System Tools > System Restore
• Select Create a restore point, and Ok it.
• Next, go to Start > Run and type in cleanmgr
• Select the More options tab
• Choose the option to clean up system restore and OK it.

This will remove all restore points except the new one you just created.

Let's clear out the programmes we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if used inappropriately.

• Double click OTMoveIt.exe to launch the programme.
• Click on the CleanUp! button.
• OTMoveIt will download a list from the Internet, if your firewall or other defensive programmes alerts you, allow it access.
• Select Yes when the "Begin cleanup Process?" prompt appears.
• If you are prompted to Reboot during the cleanup, select Yes.
• When finished exit out of OTMoveIt
• The tool will delete itself once it finishes, if not delete it by yourself.

Here are some free programs I recommend that could help you improve your computer's security.

Install SpyWare Blaster 4.0
Download it from here
Find here the tutorial on how to use Spyware Blaster here

Install WinPatrol
Download it from here
Here you can find information about how WinPatrol works here

Install FireTrust SiteHound
You can find information and download it from here

Install MVPS Hosts File from here
The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer.
Find Tutorial here : http://www.mvps.org/winhelp2002/hosts.htm
Note:"Be sure to disable the service "DNS Client" FIRST to allow the use of large HOSTS files without slowdowns.
If this isn't done first, the next reboot may take a VERY LONG TIME.
This is how to do it. First be sure you are signed in as a user with administrative privileges:

Stop and Disable the DNS Client Service
Go to Start, Run and type Services.msc and click OK.
Under the Extended Tab, Scroll down and find this service.
DNS Client
Right-Click on the DNS Client Service. Choose Properties
Select the General tab. Click on the Stop button.
Click the Arrow-down tab on the right-hand side at the Start-up Type box.
From the drop-down menu, click on Manual
Click the Apply tab, then click OK

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com
Note: If you are running Windows XP SP2, you should upgrade to SP3.

Please check out Tony Klein's article "How did I get infected in the first place?"

Read some information here how to prevent Malware.

Happy safe surfing!

[TeamBoghos]

Hi peku006, my favorite malware specialist!!

I have a question about these programs I downloaded during the clean up process. Should I also remove?:

Super AntiSpyware
HijackThis
ATF Cleaner
JavaRa
Malware Anti-Malware

Also - is SuperAntiSpyware better than Spyware Blaster? Which of the two would you recommend? Of course I already have Super Anti installed so...that's easier but I sure would value your advice on that.

[peku006]

Hi TeamBoghos

I have a question about these programs I downloaded during the clean up process. Should I also remove?:

Yes, you can remove HijackThis and JavaRa
ATF Cleaner you may keep, and indeed use regularly to remove temp files. MBAM is a great anti-malware tool (On-Demand Scanner)
(On-Demand Scanner: as the name implies, are scanners that only run when you ask them to)

is SuperAntiSpyware better than Spyware Blaster? Which of the two would you recommend?

Super AntiSpyware and Spywareblaster are two very different things

SUPERAntiSpyware is a tool who is monitoring your computer against spyware threats (On-Access Scanner)
(On-Access Scanner: as the name implies, it runs in the background all the time the PC is turned on and running. The main function of an on-access scanner is to monitor activity on your machine)

Spywareblaster is no spyware remover, it doesn`t scan and clean for malware, but prevents it from being installed in the first place. It blocks the popular spyware ActiveX controls, and also prevents the installation of any of them via a webpage.

You can keep both programs

regards
peku006

[TeamBoghos]

Hi there - I have followed all of your instructions and tips. I am so grateful for the help.

1) We have our McAfee virus scan running but for some reason I can not get it to show in my System Tray despite me turning the System Tray options ON. How can I know for sure that it is on & actively running?

2) Should I be running my Windows Firewall? Is there something better out there?

[peku006]

Hi TeamBoghos

1) We have our McAfee virus scan running but for some reason I can not get it to show in my System Tray despite me turning the System Tray options ON. How can I know for sure that it is on & actively running?

The McAfee icon may appear black when VirusScan is disabled;
when you are required to restart your computer after a service update, or when one of your services has expired.
The following steps can be taken to identify and rectify these problems:

Ensure the Date and Time are set correctly on the computer

On the Windows taskbar, double-click the Time.
Make sure the Date, Time, Year, and Time Zone are all correct, then click the OK button.

Restart Mcafee service

1. Please click on Start -> Run -> Type in services.msc -> press Enter.
2. Locate McAfee.com McShield -> double click on it -> select Automatic in the Startup Type box.
3. Now, please click on Recovery tab -> select Restart the service in the First Failure box -> click OK->Restart your computer.

2) Should I be running my Windows Firewall? Is there something better out there?

If you are using the built-in Windows XP firewall, it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to "phone home" for more instructions. Simply put, Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time.

There are a few firewalls available for free that appear to be good and easy to use:

1) Comodo (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage")
2) Online Armor
3) Sunbelt/Kerio
4) Agnitum
5) ZoneAlarm (uncheck ZoneAlarm Spy Blocker during installation if you choose this one)

After that

Please go to Start, Run, type wscui.cpl into the box and hit <Enter>.
Tell me if it reports both AntiVirus and Firewall as ON, and then click on the little down arrows on the right of each, and note the name of the application being used for each.
In your reply please include the application names and ON/OFF status of each.

Thanks peku006

[Simon V.]

This topic is now closed.

If you are the originator of this topic, and you need it re-opened please send an email to 'admin at malwareremoval.com', including a link to this topic.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the username used. If the username does not match the one in the thread linked, the email will be deleted.