Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

System Fix Virus - Please Help. [Solved]


  • This topic is locked This topic is locked

#31
redleader74

redleader74

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 165 posts
Ok, I am having trouble running the VRT successfully. It always freezes in the first 1-2% of completion. I've noticed that it gets stuck on the following file/object:

C:\$RECY...\$RKMPB8P.exe//9027656.prg

It completely freezes the computer to the point where I have to unplug the power/pull out the battery to kill the unit and the reboot again. Although, there are no other symptoms of the System Fix Virus at this point.
  • 0

Advertisements


#32
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Please empty your recycle bin and then try again.
  • 0

#33
redleader74

redleader74

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 165 posts
Ok, emptying the recycle bin helped. Running VRT the first time there were no threats detected so no log was generated.

As for the manual disinfection, I ran that, but after it finishes it just returns to home state, it does not generate the zip file or anything.
  • 0

#34
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
OK. How is your computer running now? Any problems?
  • 0

#35
redleader74

redleader74

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 165 posts
No, no problems
  • 0

#36
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Your logs shows that your system is clean. If you have no further issues with your computer, then please proceed with the following housekeeping procedures outlined below.

Removing the tools we used:

Uninstall ComboFix

Remove Combofix now that we're done with it.
  • Please press the Windows Key and R on your keyboard. This will bring up the Run... command.
  • Now copy/paste this: ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the /Uninstall, it needs to be there.

    Posted Image

  • Please follow the prompts to uninstall Combofix.
  • This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.
  • You will then recieve a message saying Combofix was uninstalled successfully once it's done uninstalling itself.

NEXT...

OTL Clean-Up:

  • Reopen Posted Image on your desktop.
  • Click on Posted Image
  • You will be prompted to reboot your system. Please do so.

If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.


There are a few things I recommend you to do once your computer is completely clean:

Updates for Windows - One of the essentials is to keep your computer updated with the latest operating system patches and security fixes. Windows Updates are constantly being revised to combat the newest hacks and threats, Microsoft releases security updates that help your computer from becoming vulnerable. It is best if you have these set to download automatically.

How to turn on Automatic Updates for Windows:

Updates for other installed software

A common attack method for hacking attempts and malware installs is to exploit known vulnerabilities in programs that are commonly installed on a person's computer. These vulnerabilities could allow a remote user or malware developer to install malware, keyloggers, and backdoors on to your computer without your knowledge or permission.
Some of the programs that are commonly exploited include Adobe Shockwave, Adobe Reader, Sun Java, Adobe Flash, and even Windows itself. Therefore it is crucial that everyone remain vigilant as to when a security vulnerability is found in our installed programs and to update it when a security update is released. Unfortunately, no one has the time to stay on top of these updates, which can happen frequently.

I highly recommend you to install Secunia Personal Software Inspector (PSI) that can be used to scan your computer for known vulnerable programs, provide information on the vulnerability, and provide a location to an update for the vulnerable program. A tutorial on how to use Secunia Personal Software Inspector (PSI) can be found here: Keep Software Updated with Secunia PSI.

Web Browsers - Picking the right internet browser is very important. You need to find one that suits your needs but that is also safe. All browsers listed below are far more secure than Internet Explorer, immune to almost all known browser hijackers, and also have the best built-in pop up blockers.

Although, if you prefer staying with Internet Explorer I highly recommend you do this :

Make Internet Explorer more secure:
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the options Download signed and unsigned ActiveX controls to Prompt, and Initialize and Script ActiveX controls not marked as safe to Disable.
  • Next click OK, then Apply button and then OK to exit the Internet Properties page.

Tips to protect yourself against malware and reduce the potential for re-infection:

Now after all these steps, your PC will be more secure. However it is important to note that you can still get infected if you are not careful. One of the best security programs you can have is common sense. As malware gets more sophisticated, you need to be more wary. If you do get caught though and the above steps can't help prevent it, we will be here to help you out.

Stay secure and thank you for choosing GeeksToGo.
  • 0

#37
redleader74

redleader74

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 165 posts
Thanks for all the help!

Unfortunately, I didn't know there were uninstall procedures to follow. I had already deleted the combofix and otl .exe files from my desktop and emptied my recycle bin. As a result, the instructions you've listed for deleting them do not work. Is there any other way to delete those software?

Thanks!
  • 0

#38
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
OK. Do the following and you are good to go:

Download OTL to your desktop.

Reset System Restore points:

  • Please reopen Posted Image on your desktop.
  • Copy (select all lines inside quote box and press CTRL+C) and Paste (press CTRL+V) the following code into the Posted Image textbox.

    :Commands
    [ClearAllRestorePoints]

  • Click on Posted Image button.
  • OTL may ask to reboot the machine. Please do so if asked.
  • Click on Posted Image button.

  • 0

#39
redleader74

redleader74

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 165 posts
Ok thanks, I think that just about does it!
  • 0

#40
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP