[fartuditu]

I let ESET scan and it didn't find anything. I will defragment and install Secutiry Essentials, as that can only help i guess. I'm waiting for your further instructions. Here's the report from ESET:




ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=108b0b61b6335e438bac472d145c51f4
# engine=15940
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-11-19 01:12:41
# local_time=2013-11-19 02:12:41 (+0100, Central Europe Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# scanned=44480
# found=0
# cleaned=0
# scan_time=3945

[Advertisements]

Good idea on MSE and the defrag. I think it time to clean up. Please note that I include steps below for updating vulnerable programs. You are already up to date on everything but Firefox. However, read the warning about Java and remember to keep them updated in the future.

Also, please take note that Microsoft support and patches for XP will be ending April 8, 2014, see here.

Congratulations. Your computer now appears to be clean. Please complete the followings steps to finalize the cleaning process.

Please update these programs, as old versions pose a security risk.

• Java
  
  WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
  See this article and this article.
  I would recommend that you completely uninstall Java unless you need it to run an important software.
  In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
  
  If you do need java, then you should definitely update to the latest version:
  
  Please download JavaRa to your desktop and unzip it to its own folder
  
  • Run JavaRa.exe, then click Remove JRE.
  • Run the built-in uninstallers for all copies of java listed
  • Click the Next button
  • Click the Next button again
  • Click the Java Manual Download link
  • A browser window will open with the Java download page
  • Click the Windows Offline (32-bit) or Windows Offline (64-bit) link to download Java (based on your browser type)
  • Run the installer
  • Close JavaRa
• Adobe Flash -> You can get the latest version here.
  
• Firefox -> You can get the latest version here.

Uninstall Combofix:

• Hold down the Windows key + R on your keyboard. This will display the Run dialogue box.
• In the Run box, type in ComboFix /Uninstall (Notice the space between the "x" and "/") then click OK.
• Follow the prompts on the screen.
• A message should appear confirming that ComboFix was uninstalled.

Clean up OTL:

• Open OTL and select the "CleanUp" button.
• Allow the computer to reboot.

Delete possibly infected restore points. Your computer may have saved a restore point while it was infected, so we need to delete the old restore points and create a new, clean one.

To reset your restore points, please note that you will need to log into your computer with an account which has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.

• Create a new, clean System Restore point which you can use in case of future system problems:
• Press Start >> All Programs >> Accessories >>System Tools >> System Restore
• Select Create a restore point, then Next, type a name like All Clean then press the Create button and once it's done press Close
• Now remove old, infected System Restore points:
• Next click Start >> Run and type cleanmgr in the box and press OK
• Ensure the boxes for Recycle Bin, Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
• Select the More Options tab, under System Restore press Clean up... and say Yes to the prompt
• Press OK and Yes to confirm

Reset SP3 Firewall: Make sure you don't have any open ports in your firewall.
Click on Start >> Run... and cut/paste in the following and click on OK

firewall.cpl

Click on the Advanced tab >> Restore Defaults >> At the prompt click on Yes >> OK
Now click on the General tab >> select On(recommended) >> OK.

Ensure that Windows is always updated. Keeping Windows updated is very important to prevent security vulnerabilities. I recommend turning on automatic updates following the instructions below:

• First, click on Start and click on Control Panel.
• Double-click on Automatic Updates to bring up the configuration dialog. If you're in Category view, you'll have to click on Security Center.
• Select the Automatic (recommended) option and click on OK at the bottom of the window.

Defragment your hard drive. Your hard drive is showing 11% fragmentation. This refers to how your files are spread out on the physical "disk" in your hard drive. You could possibly gain a little better performance from your PC if you defragment your hard drive.

• Open My Computer.
• Right-click on you C: drive, and then click Properties.
• On the Tools tab, click Defragment Now.
• Click Defragment.

Empty temp files. I would recommend doing this every so often to free up some space on your computer.

Download TFC to your desktop

• Open the file and close any other windows.
• It will close all programs itself when run, make sure to let it run uninterrupted.
• Click the Start button to begin the process. The program should not take long to finish its job
• Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Always ensure that your firewall and anti-virus program are updated and running. These are your first line of defense against infection.

Make sure that you keep all of your programs updated. Out-of-date programs can make your computer more vulnerable to infection. Software manufacturers release updates to fix security problems as they are discovered. Secunia Personal Software Inspector, free to download here, is a good program that will scan your computer looking for programs that need to be updated.

This article has good information about how computers get infected. You can read it for good tips on staying clean and safe.

[Buddierdl]

Good idea on MSE and the defrag. I think it time to clean up. Please note that I include steps below for updating vulnerable programs. You are already up to date on everything but Firefox. However, read the warning about Java and remember to keep them updated in the future.

Also, please take note that Microsoft support and patches for XP will be ending April 8, 2014, see here.

Congratulations. Your computer now appears to be clean. Please complete the followings steps to finalize the cleaning process.

Please update these programs, as old versions pose a security risk.

• Java
  
  WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
  See this article and this article.
  I would recommend that you completely uninstall Java unless you need it to run an important software.
  In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
  
  If you do need java, then you should definitely update to the latest version:
  
  Please download JavaRa to your desktop and unzip it to its own folder
  
  • Run JavaRa.exe, then click Remove JRE.
  • Run the built-in uninstallers for all copies of java listed
  • Click the Next button
  • Click the Next button again
  • Click the Java Manual Download link
  • A browser window will open with the Java download page
  • Click the Windows Offline (32-bit) or Windows Offline (64-bit) link to download Java (based on your browser type)
  • Run the installer
  • Close JavaRa
• Adobe Flash -> You can get the latest version here.
  
• Firefox -> You can get the latest version here.

Uninstall Combofix:

• Hold down the Windows key + R on your keyboard. This will display the Run dialogue box.
• In the Run box, type in ComboFix /Uninstall (Notice the space between the "x" and "/") then click OK.
• Follow the prompts on the screen.
• A message should appear confirming that ComboFix was uninstalled.

Clean up OTL:

• Open OTL and select the "CleanUp" button.
• Allow the computer to reboot.

Delete possibly infected restore points. Your computer may have saved a restore point while it was infected, so we need to delete the old restore points and create a new, clean one.

To reset your restore points, please note that you will need to log into your computer with an account which has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.

• Create a new, clean System Restore point which you can use in case of future system problems:
• Press Start >> All Programs >> Accessories >>System Tools >> System Restore
• Select Create a restore point, then Next, type a name like All Clean then press the Create button and once it's done press Close
• Now remove old, infected System Restore points:
• Next click Start >> Run and type cleanmgr in the box and press OK
• Ensure the boxes for Recycle Bin, Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
• Select the More Options tab, under System Restore press Clean up... and say Yes to the prompt
• Press OK and Yes to confirm

Reset SP3 Firewall: Make sure you don't have any open ports in your firewall.
Click on Start >> Run... and cut/paste in the following and click on OK

firewall.cpl

Click on the Advanced tab >> Restore Defaults >> At the prompt click on Yes >> OK
Now click on the General tab >> select On(recommended) >> OK.

Ensure that Windows is always updated. Keeping Windows updated is very important to prevent security vulnerabilities. I recommend turning on automatic updates following the instructions below:

• First, click on Start and click on Control Panel.
• Double-click on Automatic Updates to bring up the configuration dialog. If you're in Category view, you'll have to click on Security Center.
• Select the Automatic (recommended) option and click on OK at the bottom of the window.

Defragment your hard drive. Your hard drive is showing 11% fragmentation. This refers to how your files are spread out on the physical "disk" in your hard drive. You could possibly gain a little better performance from your PC if you defragment your hard drive.

• Open My Computer.
• Right-click on you C: drive, and then click Properties.
• On the Tools tab, click Defragment Now.
• Click Defragment.

Empty temp files. I would recommend doing this every so often to free up some space on your computer.

Download TFC to your desktop

• Open the file and close any other windows.
• It will close all programs itself when run, make sure to let it run uninterrupted.
• Click the Start button to begin the process. The program should not take long to finish its job
• Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Always ensure that your firewall and anti-virus program are updated and running. These are your first line of defense against infection.

Make sure that you keep all of your programs updated. Out-of-date programs can make your computer more vulnerable to infection. Software manufacturers release updates to fix security problems as they are discovered. Secunia Personal Software Inspector, free to download here, is a good program that will scan your computer looking for programs that need to be updated.

This article has good information about how computers get infected. You can read it for good tips on staying clean and safe.

[fartuditu]

Thank you so much for helping me get rid of those nasty viruses! I really appreciate the effort, time and expertise you offered me so far!

Thanks for pointing out microsoft will end support for xp soon. That probably means i should stop automatic updates now, or when support ends, in april. Sorry for the delay in answering btw, rl keeps me busy these days, but soon i'll get back to this issue. Thank you for the patience!

I need java, so i'll reinstall it to get latest version, the way you explained. I have the latest version of flash now, and as for mozzila and chrome, i downloaded old versions for performance sake some time ago, so they are old. New chrome really worked bad, and i wasn't satisfied with firefox not having addblock.

I will also follow all the steps you named as soon as i get time, and will report back. Just answering to say thanks and leave thread open till all is done.

[Buddierdl]

Thank you so much for helping me get rid of those nasty viruses! I really appreciate the effort, time and expertise you offered me so far!

You're welcome.

Thanks for pointing out microsoft will end support for xp soon. That probably means i should stop automatic updates now, or when support ends, in april. Sorry for the delay in answering btw, rl keeps me busy these days, but soon i'll get back to this issue. Thank you for the patience!

Definitely keep getting updates until they stop. I recommend getting Windows 7/8 before then if you are able to.

I need java, so i'll reinstall it to get latest version, the way you explained. I have the latest version of flash now, and as for mozzila and chrome, i downloaded old versions for performance sake some time ago, so they are old. New chrome really worked bad, and i wasn't satisfied with firefox not having addblock.

There is an Addblock Plus for firefox.

I will also follow all the steps you named as soon as i get time, and will report back. Just answering to say thanks and leave thread open till all is done.

[fartuditu]

Thank you for your response and advices. Please don't close the subject, as i am currently busy to solve these issues. I will have time starting monday.

[Buddierdl]

[Buddierdl]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.