[Essexboy]

For sure, be aware that the scan may find infected files that we have already quarantined

[Advertisements]

I ran a full scan from Microsoft Safety Scanner and it found ZERO infections!

The system is now working much, much better than it did when we first started a few days ago. Thank you for your patience, time and expertise.

[braddx]

I ran a full scan from Microsoft Safety Scanner and it found ZERO infections!

The system is now working much, much better than it did when we first started a few days ago. Thank you for your patience, time and expertise.

[Essexboy]

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  

  :Commands
  [resethosts]
  [emptytemp]
  [CLEARALLRESTOREPOINTS]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done

Remove ComboFix

• Hold down the Windows key + R on your keyboard. This will display the Run dialogue box
• In the Run box, type in ComboFix /Uninstall
  (Notice the space between the "x" and "/")
  then click OK
  
  
  
• Follow the prompts on the screen
• A message should appear confirming that ComboFix was uninstalled

Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.

We will now confirm that your hidden files are set to that, as some of the tools I use will change that

• Click Start.
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View Tab.
• Under the Hidden files and folders heading select Do not show hidden files and folders.
• Click Yes to confirm.
• Click OK.

Your Java is out of date.
Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.

Upgrading Java:

• Go to this site and click Do I have Java
• It will check your current version and then offer to update to the latest version

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Malwarebytes.

Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit

• Microsoft Windows Update

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?Keep safe

[braddx]

Disaster...................then recovery.

When I got to FileHippo Update Checker, it said something like "old version .Net Framework, do you want to update"? I said yes. This was about 20 hours ago. It started to update, then hung up. I waited a very long time, then wanted to quit. I couldn't. Nothing worked. Finally, I pulled the electric plug from the wall.

After I plugged it back in, I rebooted but nothing worked. The desktop was there as usual, but anything I clicked wouldn't open normally. It did begin to open, but at a snail's pace, until it just stopped.

I had recently installed Comodo Fire Wall, so I tried uninstalling that. It wouldn't let me. I'm skipping most of the details here. I forgot most of them. This went on for literally hours. I tried safe Mode but couldn't uninstall in that mode. I went to bed.

Back at it this morning. Where it usually hung up in the middle of uninstallig, this time I just let it sit there for 5 hours. Finally got a screen to restart to finish uninstall of Comodo. I did that but it was still there on my desktop. Again went to CCleaner to uninstall. This time a little quicker, and the same screen again to restart to finish uninstall. I did so, and it came back fine, just like it was before all this latest trouble started. Comodo was gone. Then uninstall GeekBuddy - it left without a whimper.

I tried to include all the pertinent details I could remember. Also, system restore wouldn't work, the only checkpoint was the same day.

End of 24 hour report.

(edit later - forgot to mention - my incoming email (thunderrbird) not working - outgoing ok. Not sure if this related.)

Edited by braddx, 24 September 2012 - 12:53 PM.

[Essexboy]

OK what error do you get when you try to set a restore point ?

After the Comodo removal is all now OK

[braddx]

I've never tried to set a restore point. I don't know how. I thought restore was automatic.

[Essexboy]

It is but you can set one manually

However, you will only have the one I set yesterday as OTL cleared the infected ones

For thunderbird I found this and it may be relevant

Do you regularly compact the message folders? Compacting is something that needs to be done regularly in any email program. We recommend weekly, but many of us do it daily. When done often enough, it can be an extremely fast process. Not doing so can lead to problems like those you are experiencing. See this about how to and why it's so important: http://kb.mozillazin...pacting_folders

If you haven't been doing that before, first back up your Thunderbird Profile -- http://kb.mozillazin.../Profile_backup then compact all folders. If 'compacting' them (and leaving a long enough time for the process to complete) doesn't fully resolve the problem then do the following on each account:

Close Thunderbird. Find and delete all of the files with the .msf file extension in your profile folder/Mail http://kb.mozillazin...der#Thunderbird including your Local Folders, especially if you are using the global inbox. You must have "View hidden files and folders" on http://spywarewarrio...topic.php?t=272 and you need to set "hide extensions for known file types" off (just below View Hidden) if you are using Windows. These are your mail summary files and do not hold any messages themselves. They will be rebuilt the next time you open each folder in Thunderbird. Compact all your folders when you have completed this.

To avoid this happening again, see the tips in these articles:
http://kb.mozillazin...g_(Thunderbird)
http://kb.mozillazin...e_(Thunderbird)

[braddx]

1- I found out that the email problem is occurring with all Thunderbird users. Their website says "severe outage for Email DSL. We are doing everything to resolve the issue". My inbox mail is taking about 45 minutes. So that's that.

2- Ok on the OTL cleaning the infected restore points.

3- Considering #1 above, everything seems to be ok now.

Should I go back to the hippo file thing and try again? If it's not too important I'd rather not.

Can you recommend a firewall? Comodo, for whatever reason, must have been the culprit.

[Essexboy]

No need for Filehippo it is just a recommendation

You could try Outpost Internet suite but you will need to either disable the antivirus part or uninstall AVG

[braddx]

Ok. I'll look at Outpost.

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.