[HeavyB]

Malware bytes, no items detected -
Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org

Database version: v2013.01.11.09

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Bill :: BILL-PC [administrator]

Protection: Enabled

1/11/2013 9:59:05 AM
mbam-log-2013-01-11 (09-59-05).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 214383
Time elapsed: 3 minute(s), 50 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

[Advertisements]

OK - so I flubbed on saving the ESET log file before I clicked uninstall. BUT - it did say that there was nothing detected, so I think I am in the clear. Thanks so much for the help, that was VERY thorough and it looks like things are running just fine.

Couple of questions -

1 - What is the purpose of malware like that? It only seemed to re-direct me to other goofy search engines (though I never clicked any further when re-directed) so is it just a pain in the butt? What did they have to gain or steal? Was I at any risk of having personal information or accounts compromised? It didn't seem that way.

2 - Can I delete all these programs I downloaded to fix this? Any you think I should keep?

3 - Where can I donate for the help? As happy as I am to get a service like this for free, I know your time is as valuable as mine is, and you saved me a bunch of money AND time by not having to take this to the shop - a donation would be well deserved, and you have my most sincere thanks. And I want to keep the help coming! So why not?
Please advise,

[HeavyB]

OK - so I flubbed on saving the ESET log file before I clicked uninstall. BUT - it did say that there was nothing detected, so I think I am in the clear. Thanks so much for the help, that was VERY thorough and it looks like things are running just fine.

Couple of questions -

1 - What is the purpose of malware like that? It only seemed to re-direct me to other goofy search engines (though I never clicked any further when re-directed) so is it just a pain in the butt? What did they have to gain or steal? Was I at any risk of having personal information or accounts compromised? It didn't seem that way.

2 - Can I delete all these programs I downloaded to fix this? Any you think I should keep?

3 - Where can I donate for the help? As happy as I am to get a service like this for free, I know your time is as valuable as mine is, and you saved me a bunch of money AND time by not having to take this to the shop - a donation would be well deserved, and you have my most sincere thanks. And I want to keep the help coming! So why not?
Please advise,

[Buddierdl]

Hi HeavyB,

1 - What is the purpose of malware like that? It only seemed to re-direct me to other goofy search engines (though I never clicked any further when re-directed) so is it just a pain in the butt? What did they have to gain or steal? Was I at any risk of having personal information or accounts compromised? It didn't seem that way.

Some website advertising gets paid by the visit. So if people can generate more visits to their websites, they can make more money (fradulently). Some webpages might also be designed to trick you into giving personal info or buying something to "clean" an already clean computer. This article goes more in depth if you are interested.

2 - Can I delete all these programs I downloaded to fix this? Any you think I should keep?

You can follow my steps below to get rid of our tools and logs. Anything left over you can delete yourself. The only thing I recommend keeping is Malwarebytes. It is a good idea to scan the computer weekly.

3 - Where can I donate for the help? As happy as I am to get a service like this for free, I know your time is as valuable as mine is, and you saved me a bunch of money AND time by not having to take this to the shop - a donation would be well deserved, and you have my most sincere thanks. And I want to keep the help coming! So why not?

Since I am still in training, I can't accept donations, but you can donate to the site here.

Congratulations . Your computer now appears to be clean. Please complete the followings steps to finalize the cleaning process:

It would be a good idea also to reset your firewall in case the malware opened any ports.

Please update these programs, as old versions pose a security risk.

• Java
  Please download JavaRa to your desktop and unzip it to its own folder
  
  • Run JavaRa.exe, then click Remove JRE.
  • Run the built-in uninstallers for all copies of java listed
  • Click the Next button
  • Click the Next button again
  • Click the Java Manual Download link
  • A browser window will open with the Java download page
  • Click the Windows Offline (32-bit) or Windows Offline (64-bit) link to download Java (based on your browser type)
  • Run the installer
  • Close JavaRa
• Adobe Reader -> You can get the latest version here.

Clean up OTL:

• Open OTL and select the "CleanUp" button.
• Allow the computer to reboot.
• Any logs or removal tools left over can be deleted now. If ESET is still installed, you can uninstall it from the "Programs and Features" menu in the control panel.

Delete possibly infected restore points. Your computer may have saved a restore point while it was infected, so we need to delete the old restore points and create a new, clean one.

First set up a new, clean restore point:

• Open System by clicking the Start button, right-clicking Computer, and then clicking Properties.
• In the left pane, click System protection. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
• Click the System Protection tab, and then click Create.
• In the System Protection dialog box, type a description, and then click Create.

Then delete the old, infected ones:

• Go Start > All Programs > Accessories > System Tools
• Right click Disc Cleanup and select run as administrator
• Then select the more options tab
• Select system restore and shadow copies "Clean up"
• Follow the prompts

Empty temp files. I would recommend doing this every so often to free up some space on your computer.

Download TFC to your desktop

• Open the file and close any other windows.
• It will close all programs itself when run, make sure to let it run uninterrupted.
• Click the Start button to begin the process. The program should not take long to finish its job
• Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Ensure that Windows is always updated. Keeping Windows updated is very important to prevent security vulnerabilities. I recommend turning on automatic updates following the instructions below:

• First, click on Start and click onAll Programs, then Windows Update.
• Click on Change Settings in the left pane and then check the option for Automatic Updates.

Always ensure that your firewall and anti-virus program are updated and running. These are your first line of defense against infection.

Make sure that you keep all of your programs updated. Out-of-date programs can make your computer more vulnerable to infection. Software manufacturers release updates to fix security problems as they are discovered. Secunia Personal Software Inspector, free to download here, is a good program that will scan your computer looking for programs that need to be updated.

This article has good information about how computers get infected. You can read it for good tips on staying clean and safe.

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.