[ldsdbomber]

everything seems to be fine now, many thanks for your help, I really appreciate it. One or two of the instructions didn't always match the latest versions of the programs you discussed, but it is a nightmare to keep up, and applying the changes to the wrong connection (LAN as opposed to Speedtouch) kept us chasing our tails a bit longer than needed, but it looks like the malware has been defeated, and I've beefed up my anti malware protection now.

I don't know how much people usually donate but mine will appear under "Lee Harris" and I'll go and do that now. Thanks again.

[Advertisements]

Should I clean up my restore points now and set a new one so that I have a clean one to go back to in future?

[ldsdbomber]

Should I clean up my restore points now and set a new one so that I have a clean one to go back to in future?

[Flrman1]

You're Welcome and thanks for the donation!

* If I had you use Killbox to delete any files, go ahead and delete the C:\!Killbox folder then empty the Recycle Bin.


* Check this out for info on how to tighten your security settings and some good free tools to help prevent this from happening again.


* Go to Windows update and install all "High Priority Updates".


* Now turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn System Restore back on and create a restore point.

To create a restore point:

Single-click Start and point to All Programs.
Mouse over Accessories, then System Tools, and select System Restore.
In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the Next button.
Type a description for your new restore point. Something like "After trojan/spyware cleanup". Click Create and you're done.

Edited by Flrman1, 04 December 2006 - 06:16 PM.

[ldsdbomber]

Thank you. One last thing. I have 2 folders on my hard disk
C:\028b2e348b1abc762b23fa
C:\fb86c65e6a8777632f0a5dfc

in it is this text log file, it all sounds suspicious, including words like payload and repress shutdown. Is this dangerous?

Attached Files

•  msxml4_KB927978_enu.zip   22.62KB   106 downloads
•  msxml6_KB927977_enu_x86.zip   40.26KB   84 downloads

Edited by ldsdbomber, 05 December 2006 - 12:35 AM.

[Flrman1]

Those are nothing more than logs created by recent updates you installed from Windows Update.

[Flrman1]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.