[Wizard]

What I meant was the account you use to logon to you computer,your useraccount,is it an Adminstrator account.

If you dont know,open the Control Panel and go to User Accounts,you should find all the information there.

For now,hopefully you have HijackThis allready and can post a fresh log from that scan?

[Advertisements]

Cretemonster , sorry about that , no we do not use an adminstrator account to logon . I did the scan last night and posted that , was that right , those two files ? If not , please let me know , Thanks so much , Wendy .

[wirewendy]

Cretemonster , sorry about that , no we do not use an adminstrator account to logon . I did the scan last night and posted that , was that right , those two files ? If not , please let me know , Thanks so much , Wendy .

[Wizard]

OK,thats fine,all these require an admin account as far as I know.

How is the computer acting today?

[wirewendy]

Cretemonster , Hi , computer seems ok . Faster , you know . How do I know it is safe , we were pretty darn infected , right ? Is there anyway to tell if we are safe now ? Thanks so much , Wendy .

[wirewendy]

Cretemonster , I was wrong , we do use an admin accout to logon . Sorry about that I had my Daughter look for me and went back today to confirm and she made a mistake . Does this change anything ? Thanks , Wendy .

[Wizard]

No worries but you may have to remind me from time to time what we are fixing now.

O yeah..the silly online scan thing...what version of Internet Explorer are you using?

[wirewendy]

Hi Cretemonster , Thanks for posting again . I believe this is our current IE {6.0.2900.2180} . Again , Please forgive my lack of computer knowledge , and any spelling errors , it's been a rough week , Thanks again , Wendy .

[wirewendy]

Cretemonster , Hi , I think we were trying to get rid of the vundo . McAFee did an auto scan and came up with this not to long ago , Hope you can help , Thank you again , Wendy . C:\SYSTEM VOLUME INFORMATION\_RESTORE{70304573-AB33-4072-AA96-4495C42D15E3}\RP829\A0150271.DLL

[Wizard]

We are fixing to take care of that right now,that is Windows System Restore folder and we are going to flush it all out and make you a nice new restore point for the computer.

Now we need to reset System Restore and Clear out all the old infected restore points.

• Click Start
• Right-Click "My Computer" and Select Properties.
• Click on the "System Restore" tab.
• Place a checkmark in the box for "Turn off System Restore" and Click "Apply."
• Restart the Computer.
• Return to System Restore and Uncheck the box for "Turn off System Restore" and Click "Apply."
• A fresh Restore Point will be created.

Here are a list if ideas and suggestions to assist you in an increased security level for your computer.

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

Windows, Internet Explorer and Microsoft Office Updates

Visit Microsoft's Windows Update Site frequently. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

If you are running Microsoft Office, or any application of it, go to the Microsoft's Office Update site and make sure you have at least all the critical updates installed.

If you have trouble with Windows Update, you still can get all the Critical Updates, Security Fixes and Service Packs. Below are a few links to bookmark.

Microsoft Security Bulletins
http://www.microsoft...ty/current.aspx

Office downloads
http://office.micros...te/default.aspx

Download Center
http://www.microsoft...ads/search.aspx

Microsoft Security Advisories
http://www.microsoft...ry/default.mspx

Recently Published
http://www.microsoft...nt/default.mspx

Programs that may help you in keeping the PC clean

MalwareBytes Anti-Malware can be found Here or Here

• The full version provides a degree of real-time protection along with other solutions against spyware that is a great addition to any computer.
• The free version can be updated and used for scanning your computer weekly for new malware.

ERUNT(The Emergency Recovery Utility for NT) can be found Here or Here

• You can use this utility as a primary registry backup utility, apart from System Restore.
• Two methods of registry backup ( System Restore and using ERUNT ) is often recommended.
• Detailed usage can be found Here

It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See the link below for a listing of some online & their stand-alone antivirus programs.
Computer Safety On line - Anti-Virus
http://forum.malware...pic.php?p=53#53

Update your Anti Virus Software

It is imperative that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall

I can not stress enough how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For an article on Firewalls and a listing of some available ones see the link below.
Computer Safety On line - Software Firewalls
http://forum.malware...pic.php?p=56#56
A tutorial on Understanding and Using Firewalls can be found here

Additional Information

For more information about Spyware, the tools available, and other informative material, including information on how you may have been infected in the first place, please check out this link.

A very nice collection of tutorials is available at Bleeping Computer
http://www.bleepingc....com/tutorials/

Finally, after following up on all these recommendations, run Jason Levine's Browser Security Tests ?
They will provide you with an insight on how vulnerable you might still be to a number of common exploits.
http://www.jasons-to...rowserSecurity/

Other Security checks and more sites relating to computer security are listed below, take the time to visit these when you have time.
Symantec Security Check
Gibson Research Corporation Home Page (Look for the Hot Spots Section)
McAfee SiteAdvisor
LinkScanner
GFI Email Security Testing Zone

[wirewendy]

Cretemonster , Thank you so much for providing all the info on what I could do to safe gaurd my PC . I have followed your directions , learning alot as I add the programs and do the tests you recommended in your last post . Here is the question , Is there another test scan to see if the vundo is still inside our PC ? Thank you again , Wendy .