Malware removal help reuired

[bhushan]

Hi,

Many Thanks for your reply

1. Updated to latest java version as per your instruction
2. upgraded Adobe Reader
3. Kaspersky website scan out put

Tuesday, May 18, 2010
Operating system: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Monday, May 17, 2010 18:15:39
Records in database: 4119635


Scan settings
scan using the following database extended
Scan archives yes
Scan e-mail databases yes

Scan area My Computer
C:\
D:\
E:\

Scan statistics
Objects scanned 134258
Threats found 4
Infected objects found 7
Suspicious objects found 0
Scan duration 03:39:24

File name Threat Threats count
C:\Qoobox\Quarantine\C\Program Files\MSN\rtesejifs.html.vir Infected: Trojan-Clicker.HTML.IFrame.dn 1

C:\Qoobox\Quarantine\C\rcukd.cmd.vir Infected: Packed.Win32.Krap.b 1

C:\Qoobox\Quarantine\C\tyktjfww.exe.vir Infected: Packed.Win32.Krap.b 1

C:\Qoobox\Quarantine\C\WINDOWS\system32\f10WtR\f10WtR1099.exe.vir Infected: Trojan-Downloader.Win32.VB.bgd 1

C:\Qoobox\Quarantine\C\WINDOWS\system32\gasretyw0.dll.vir Infected: Packed.Win32.Krap.b 1

C:\Qoobox\Quarantine\C\WINDOWS\system32\kamsoft.exe.vir Infected: Packed.Win32.Krap.b 1

C:\Qoobox\Quarantine\C\WINDOWS\system32\setup.ini.vir Infected: Trojan.Win32.AutoRun.ke 1

Selected area has been scanned.


Please let me know what are the next steps.

Thanks for ur help!!

Regards,
Bhushan

[deltalima]

Hi bhushan,

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure

DeFogger

To re-enable your Emulation drivers, double click DeFogger to run the tool.

• The application window will appear
• Click the Re-enable button to re-enable your CD Emulation drivers
• Click Yes to continue
• A 'Finished!' message will appear
• Click OK
• DeFogger will now ask to reboot the machine - click OK

Remove GMER

Delete the GMER icon from your desktop.

Delete the RootRepeal icon from your desktop.

Delete the TDSSKiller icon, folder and zip file from your desktop.

Uninstall ComboFix

• Click START then RUN
  
• Now type Combofix /Uninstall in the runbox and click OK

Clean up with OTL

• Double-click OTL.exe to start the program. This will remove all the tools we used to clean your pc.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CleanUp! button
• Say Yes to the prompt and then allow the program to reboot your computer.

Update your AntiVirus Software and keep your other programs up-to-date
Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Important you need to update XP to service pack 3 and IE to version 8
Security Updates for Windows, Internet Explorer & Microsoft Office
Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the Microsoft Update site on a regular basis.


Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware


Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.[/list]Follow this list and your potential for being infected again will reduce dramatically.

Here are some additional utilities that will enhance your safety

• MVPS Hosts file <= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer
• Winpatrol <= Download and install the free version of Winpatrol. a tutorial for this product is located here:
  Using Winpatrol to protect your computer from malicious software

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place

Happy surfing and stay clean!

[bhushan]

Hi Deltalima,


Many Thanks for all your help!!!..Highly appriciate it.

I was not sure how i was going to deal with all the infections. you have been extreamly helpful.

Thanks again.
Bhushan

[Elrond]

bhushan this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.