Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

infection with my computer [RESOLVED]


  • This topic is locked This topic is locked

#16
vehbi

vehbi

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Deckard's System Scanner v20071014.68
Run by Vehbi Tasar on 2008-04-18 17:31:18
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as Vehbi Tasar.exe) -----------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:32:13 PM, on 4/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Vehbi Tasar\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Vehbi Tasar.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://meetings.web...bex/ieatgpc.cab
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 2997 bytes

-- Files created between 2008-03-18 and 2008-04-18 -----------------------------

2008-04-18 15:52:55 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Malwarebytes
2008-04-18 15:52:49 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-18 15:52:47 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-04-15 09:46:05 0 d-------- C:\OTScanIt
2008-04-14 23:41:50 0 d-------- C:\WINDOWS\ERUNT
2008-04-11 12:22:56 0 d-------- C:\temp
2008-04-11 10:14:53 0 d-------- C:\Program Files\AbsoluteTransfer
2008-04-11 09:28:01 0 d-------- C:\Program Files\Trend Micro
2008-04-11 09:13:25 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\TmpRecentIcons
2008-04-10 21:00:29 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Sun
2008-04-09 21:12:28 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\skypePM
2008-04-05 18:08:39 26 --a------ C:\WINDOWS\SW_Win2000X16.DLL
2008-04-05 18:08:22 78 --a------ C:\WINDOWS\SW_Win2000X9.DLL
2008-04-05 18:06:34 221184 --a------ C:\WINDOWS\system32\SII_PDF.dll
2008-04-05 18:06:34 720896 --a------ C:\WINDOWS\system32\C-XLS.dll <Not Verified; Softinterface, Inc.; Softinterface Convert-XLS>
2008-04-05 18:06:34 131072 --a------ C:\WINDOWS\system32\CSVSpecialProcessing.dll
2008-04-05 18:06:33 0 d-------- C:\WINDOWS\system32\Resource
2008-04-05 18:06:32 225280 --a------ C:\WINDOWS\system32\DrakeCom.dll <Not Verified; ; DrakeCom Module>
2008-04-05 18:06:32 1409024 --a------ C:\WINDOWS\system32\Drake.dll <Not Verified; BCL Technologies; BCL Drake 7>
2008-04-05 18:06:30 0 d-------- C:\Program Files\Softinterface, Inc
2008-04-05 15:41:12 0 d-------- C:\Program Files\DVD Decrypter
2008-03-20 23:21:44 0 --a------ C:\Documents and Settings\Vehbi Tasar\LOG


-- Find3M Report ---------------------------------------------------------------

2008-04-18 09:06:49 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\webex
2008-04-17 10:59:07 0 d-------- C:\Program Files\eRef
2008-04-11 12:32:31 0 d-------- C:\Program Files\1-Click Answers
2008-04-11 12:32:28 0 d-------- C:\Program Files\Common Files
2008-04-11 10:23:07 0 d-------- C:\Program Files\QuickTime
2008-04-11 10:13:30 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Skype
2008-04-11 10:13:29 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\DNA
2008-04-05 18:01:25 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\GoodSync
2008-04-05 17:55:36 0 d-------- C:\Program Files\Siber Systems
2008-03-25 15:15:20 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Intuit
2008-03-21 08:47:01 0 d-------- C:\Program Files\Citrix
2008-03-19 23:31:37 0 d-------- C:\Program Files\Java
2008-03-18 14:47:02 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\U3
2008-03-13 11:02:15 0 d-------- C:\Program Files\Skype
2008-03-11 20:00:26 0 d-------- C:\Program Files\Common Files\AnswerWorks 5.0
2008-03-11 20:00:25 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-03-11 20:00:05 0 d-------- C:\Program Files\Quicken
2008-03-09 09:29:11 0 d-------- C:\Program Files\DVD Shrink
2008-03-04 19:00:19 0 d-------- C:\Program Files\Windows Live
2008-03-04 18:59:40 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2008-02-28 12:26:12 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\TomTom
2008-02-28 12:25:52 0 d-------- C:\Program Files\TomTom HOME 2
2008-02-28 12:25:34 0 d-------- C:\Program Files\TomTom HOME
2008-02-28 12:23:21 0 d-------- C:\Program Files\TomTom DesktopSuite
2008-02-18 13:23:12 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\BitTorrent
2008-02-18 13:20:56 0 d-------- C:\Program Files\DNA


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [03/02/2005 06:39 PM]
"ShStatEXE"="C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.exe" [02/22/2007 09:50 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 08:00 AM]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [10/18/2007 12:34 PM]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [02/05/2007 03:39 PM 294400]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\svcWRSSSDK]
@="Service"


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{676bdcc1-8b10-11d9-948a-806d6172696f}]
play\command- "C:\Program Files\Real\RealPlayer\RealPlay.exe" /dvd %1




-- End of Deckard's System Scanner: finished at 2008-04-18 17:32:33 ------------
  • 0

Advertisements


#17
vehbi

vehbi

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Yes, my computer seems to be running better now. Thank you! I did not see an outward demonstration of a Trojan or Virus though ever since I did what I did the first day on April 14. Of course, it seems like it was still infected even then. Given that this took such a long time and so many programs to run (about 5 or 6 I think), can you tell me what exactly happened in my computer?

Once again, I truly appreciate your help. I don't think I would have cared to do anything once MacCafee said I was I fine.

Vehbi
  • 0

#18
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
This is some codec malware that is going around lately

One final thing

Delete this folder in bold

C:\Program Files\AbsoluteTransfer


Reboot and post a new DSS log and tell me how that went
  • 0

#19
vehbi

vehbi

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Deckard's System Scanner v20071014.68
Run by Vehbi Tasar on 2008-04-20 20:24:51
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as Vehbi Tasar.exe) -----------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:25:12 PM, on 4/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Vehbi Tasar\Desktop\Unused Desktop Shortcuts\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\VEHBIT~1.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://meetings.web...bex/ieatgpc.cab
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 3139 bytes

-- Files created between 2008-03-20 and 2008-04-20 -----------------------------

2008-04-18 15:52:55 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Malwarebytes
2008-04-18 15:52:49 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-18 15:52:47 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-04-15 09:46:05 0 d-------- C:\OTScanIt
2008-04-14 23:41:50 0 d-------- C:\WINDOWS\ERUNT
2008-04-11 12:22:56 0 d-------- C:\temp
2008-04-11 09:28:01 0 d-------- C:\Program Files\Trend Micro
2008-04-11 09:13:25 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\TmpRecentIcons
2008-04-10 21:00:29 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Sun
2008-04-09 21:12:28 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\skypePM
2008-04-05 18:08:39 26 --a------ C:\WINDOWS\SW_Win2000X16.DLL
2008-04-05 18:08:22 78 --a------ C:\WINDOWS\SW_Win2000X9.DLL
2008-04-05 18:06:34 221184 --a------ C:\WINDOWS\system32\SII_PDF.dll
2008-04-05 18:06:34 720896 --a------ C:\WINDOWS\system32\C-XLS.dll <Not Verified; Softinterface, Inc.; Softinterface Convert-XLS>
2008-04-05 18:06:34 131072 --a------ C:\WINDOWS\system32\CSVSpecialProcessing.dll
2008-04-05 18:06:33 0 d-------- C:\WINDOWS\system32\Resource
2008-04-05 18:06:32 225280 --a------ C:\WINDOWS\system32\DrakeCom.dll <Not Verified; ; DrakeCom Module>
2008-04-05 18:06:32 1409024 --a------ C:\WINDOWS\system32\Drake.dll <Not Verified; BCL Technologies; BCL Drake 7>
2008-04-05 18:06:30 0 d-------- C:\Program Files\Softinterface, Inc
2008-04-05 15:41:12 0 d-------- C:\Program Files\DVD Decrypter
2008-03-20 23:21:44 0 --a------ C:\Documents and Settings\Vehbi Tasar\LOG


-- Find3M Report ---------------------------------------------------------------

2008-04-19 17:52:18 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Skype
2008-04-18 09:06:49 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\webex
2008-04-17 10:59:07 0 d-------- C:\Program Files\eRef
2008-04-11 12:32:31 0 d-------- C:\Program Files\1-Click Answers
2008-04-11 12:32:28 0 d-------- C:\Program Files\Common Files
2008-04-11 10:23:07 0 d-------- C:\Program Files\QuickTime
2008-04-11 10:13:29 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\DNA
2008-04-05 18:01:25 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\GoodSync
2008-04-05 17:55:36 0 d-------- C:\Program Files\Siber Systems
2008-03-25 15:15:20 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\Intuit
2008-03-21 08:47:01 0 d-------- C:\Program Files\Citrix
2008-03-19 23:31:37 0 d-------- C:\Program Files\Java
2008-03-18 14:47:02 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\U3
2008-03-13 11:02:15 0 d-------- C:\Program Files\Skype
2008-03-11 20:00:26 0 d-------- C:\Program Files\Common Files\AnswerWorks 5.0
2008-03-11 20:00:25 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-03-11 20:00:05 0 d-------- C:\Program Files\Quicken
2008-03-09 09:29:11 0 d-------- C:\Program Files\DVD Shrink
2008-03-04 19:00:19 0 d-------- C:\Program Files\Windows Live
2008-03-04 18:59:40 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2008-02-28 12:26:12 0 d-------- C:\Documents and Settings\Vehbi Tasar\Application Data\TomTom
2008-02-28 12:25:52 0 d-------- C:\Program Files\TomTom HOME 2
2008-02-28 12:25:34 0 d-------- C:\Program Files\TomTom HOME
2008-02-28 12:23:21 0 d-------- C:\Program Files\TomTom DesktopSuite


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [03/02/2005 06:39 PM]
"ShStatEXE"="C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.exe" [02/22/2007 09:50 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 08:00 AM]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [10/18/2007 12:34 PM]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [02/05/2007 03:39 PM 294400]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\svcWRSSSDK]
@="Service"




-- End of Deckard's System Scanner: finished at 2008-04-20 20:25:35 ------------
  • 0

#20
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Your logs are clean ! We need to do a few things

Now we need to create a new System Restore point.

Click Start Menu > Run > type (or copy and paste)

%SystemRoot%\System32\restore\rstrui.exe

Press OK. Choose Create a Restore Point then click Next. Name it and click Create, when the confirmation screen shows the restore point has been created click Close.

Next goto Start Menu > Run > type

cleanmgr

Click OK, Disk Cleanup will open and start calculating the amount of space that can be freed, Once thats finished it will open the Disk Cleanup options screen, click the More Options tab then click Clean up on the system restore area and choose Yes at the confirmation window which will remove all the restore points except the one we just created.

To close Disk Cleanup and remove the Temporary Internet Files detected in the initial scan click OK then choose Yes on the confirmation window.



  • Make sure you have an Internet Connection.
  • Double-click OTMoveIt2.exe to run it.
  • Click on the CleanUp! button
  • A list of tool components used in the Cleanup of malware will be downloaded.
  • If your Firewall or Real Time protection attempts to block OtMoveit2 to rech the Internet, please allow the application to do so.
  • Click Yes to beging the Cleanup process and remove these components, including this application.
  • You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.


You now need to update your Java and remove your older versions.

Please follow these steps to remove older version Java components.

* Click Start > Control Panel.
* Click Add/Remove Programs.
* Check any item with Java Runtime Environment (JRE) in the name.
* Click the Remove or Change/Remove button.

Download the latest version of Java Runtime Environment (JRE), and install it to your computer from
here




Below I have included a number of recommendations for how to protect your computer against malware infections.

* Keep Windows updated by regularly checking their website at :
http://windowsupdate.microsoft.com/
This will ensure your computer has always the latest security updates available installed on your computer.

* To reduce re-infection for malware in the future, I strongly recommend installing these free programs:
SpywareBlaster protects against bad ActiveX
IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all
Have a look at this tutorial for IE-Spyad here

* SpywareGuard offers realtime protection from spyware installation attempts.

Make Internet Explorer more secure
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.

* MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

* Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more
secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up
blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
Here

* Take a good look at the following suggestions for malware prevention by reading Tony Klein’s article 'How Did I Get Infected In The First Place'
Here

Thank you for your patience, and performing all of the procedures requested.
  • 0

#21
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP