Congratulations your logs look clean!
Please follow the steps below to make your computer more secure.
First, re-enable any anti-virus/anti-malware programs we have disabled during the removal process!
Now type Combofix /Uninstall into the Search box and click OK. Note the space between the X and the U, it needs to be there.
- Download OTC to your desktop and run it.
- Click Yes to beginning the Cleanup process and remove these components, including this application.
- You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.
Note: If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.
Windows Update - This program scans your computer for any patches or updates that are missing from your computer. You should check this program regularly to keep windows up to date. This will ensure your computer has all of the latest security updates installed on your computer and is secure from any known security holes. Windows Updates are constantly being revised to combat the newest hacks and threats.
It is best if you have these set to download automatically.
How to turn on Automatic Updates:
- Open Windows Update.
- In the left pane, click Change settings.
- Under Important updates, select Install updates automatically.
Adobe Reader - Make sure you have the latest version of Adobe Reader. It's important to keep Adobe Reader updated because many security problems are fixed with updates.
How to check for Adobe Reader updates:
- Open Adobe Reader.
- On the menu bar click on Help then Check For Updates.
- The program will then tell you if updates are available.
Make sure you have the latest Adobe Flash Player (11.3.300.265) and Adobe Shockwave Player (184.108.40.2065) so you can view all of the latest content on websites.
Make Internet Explorer more secure
- Click Start.
- Type Inetcpl.cpl into the Search box & click OK.
- Click on the Security tab.
- Click Reset all zones to default level.
- Make sure the Internet Zone is selected & Click Custom level.
- In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
- Next Click OK, then Apply button and then OK to exit the Internet Properties page.
Make sure you update your security programs regularly so they know about new infections so they can protect your computer against them.
Here are a list of programs/tools that I like to recommend to users to reduce the risk of infection in the future:
MBAM - MalwareBytes Anti Malware is an excellent tool program to detect and get rid of malware. This program should be updated and run often.
SpywareBlaster - Prevents spyware from installing on your system and stops you from getting infected. It protects against bad ActiveX and immunizes your PC against them.
SpywareGuard - Works as a Spyware "Shield" to protect your computer from getting malware in the first place. It offers realtime protection from spyware installation attempts.
Note: Make sure you are only running one real-time anti-spyware protection program (eg: TeaTimer, Windows Defender) or there will be a conflict.
Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up blocker (as an added benefit!) that I have ever seen. Hijackers like to attack Internet Explorer more than FireFox. If you are interested, Firefox may be downloaded from here.
NoScript - Blocks ads and other potential website attacks.
AdBlockPlus - Adblock Plus gets rid of ads and banners on the internet.
DrWeb Anti-Virus Link Checker - Allows you to check any file you are about to download, any page you are about to visit with online version of Dr.Web anti-virus.
Other browsers include:
WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
Green to go.
Yellow for caution.
Red to stop.
WOT has an addon available for both Firefox and IE.
ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
IE-SpyAd - Puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all. It prevents Cookies etc from downloading, from these websites, onto your computer.
MVPS Hosts File replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated. Its important to keep programs up to date so that malware doesn't exploit any old security flaws.
Google Toolbar - Get the free google toolbar to help stop pop ups.
Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
To learn more about how to protect yourself while on the internet read this article by Tony Klein: So how did I get infected in the first place?
Please respond one last time so we can consider the thread resolved and close it, thank-you.
Good luck and stay safe!!!