[cookiefp]

all looks good, the kaspersky scan picked up items safely quarantined or false positives except could you tell me what this program is: D:\Unzipped\Winamp\winamp5092_pro.exe.....dont run it, just tell me if you know what it is, or if we can delete it. the kaspersky scan seems to think it is infected.

computer is running much better now but some sites are not being displayed properly such as geekstogo. the website themes/backgrounds/graphics arent displayed. its just displaying text. only for some websites though.

sounds like the firefox cache needs to be cleared.

To clear the cache, go to Tools > Options
Go to Advanced category, and then click on the Network tab.
Under Cache, click the Clear Now button.
Click OK.

To clear your History List, go to [/b]Tools[/b] > Clear Private Data.
Check Browsing History. Uncheck all other items.
Click Clear Private Data Now.

If you are having problems with the way Firefox displays the pages on some sites, try hitting Ctrl and F5 at the same time. This should refresh the page to the correct state.

tell me how it looks now.

andrewuk

the file is just an installer for Winamp 5.092.

This seems to have fixed my problems with Firefox.

Thank you so much!

[Advertisements]

D:\Unzipped\Winamp\winamp5092_pro.exe Infected: Backdoor.Win32.ServU-based 1
D:\Unzipped\Winamp\winamp5092_pro.exe Infected: Trojan.BAT.Zapchast 1
D:\Unzipped\Winamp\winamp5092_pro.exe Infected: Backdoor.Win32.Iroffer.b 1

your call, but it looks infected to me. they may be false positives, but if you dont need the installer anymore then i would delete that file. you can delete it manually and then empty the recycle bin.

let me know what you do, then we can wrap this all up

[andrewuk]

D:\Unzipped\Winamp\winamp5092_pro.exe Infected: Backdoor.Win32.ServU-based 1
D:\Unzipped\Winamp\winamp5092_pro.exe Infected: Trojan.BAT.Zapchast 1
D:\Unzipped\Winamp\winamp5092_pro.exe Infected: Backdoor.Win32.Iroffer.b 1

your call, but it looks infected to me. they may be false positives, but if you dont need the installer anymore then i would delete that file. you can delete it manually and then empty the recycle bin.

let me know what you do, then we can wrap this all up

[cookiefp]

ok. deleted.


one question though, what AntiSpyware scanner do you recommend using in future? I was using Adware but should I just keep SUPERAntiSpyware ?

[andrewuk]

Hi cookiefp

congratulations, your logs are clean and another fix is in the can

in this post we will clear away the fix tools (this is so that should you ever be re-infected, you will download updated versions and it will also remove the quarantined Malware from your computer), reset your restore points (there will be infections lurking in there) and i will leave you with some ideas on how to enhance the protection of your machine against future infection.

on your question about SUPERantispyware vs Adware - you can use them both, and i would keep them both. the most important thing is to remember to keep them all updated. personally, i update and run a full scan on a weekly basis.

====STEP 1====
Please download the OTCleanIt by OldTimer.

• Save it to your desktop.
• Please double-click OTCleanIT.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
• Click on the CleanUp! button to begin the Cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.

you can also clear away any other tools we used.

====STEP 2====
To reset your restore points, please note that you will need to log into your computer with an account which has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.

Instructions with screenshots to help is http://www.f-secure..../sfc_dis1.shtml

(Windows XP)
1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

2. Reboot.

3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/kb/310405


====IDEAS TO SPEED UP YOUR MACHINE====
this page http://users.telenet...owcomputer.html gives some good ideas on how to improve the efficiency of your machine and has one or two useful links to help your further.


====AND FINALLY====
The following is a list of tools and utilities that I like to suggest to people. This list is full of great tools and utilities to help you understand how you got infected and how to keep from getting infected again.

• Spybot Search & Destroy - Uber powerful tool which can search and annhilate nasties that make it onto your system. Now with an Immunize section that will help prevent future infections.
  
• AdAware - Another very powerful tool which searches and kills nasties that infect your system. AdAware and Spybot Search & Destroy compliment each other very well.
  
• SpywareBlaster - Great prevention tool to keep nasties from installing on your system.
  
• SpywareGuard - Works as a Spyware "Shield" to protect your computer from getting malware in the first place.
  
• IE-SpyAd - puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
  
• ATF Cleaner - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
  
• Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.
  
• Google Toolbar - Free google toolbar that allows you to use the powerful Google search engine from the bar, but also blocks pop up windows.
  
• Trillian or Miranda-IM - These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)

To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein


andrewuk

[cookiefp]

done and done.

thank you so much andrew. comp is whirling along nicely now

[andrewuk]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.