21 replies to this topic

[power333]

Yes, everything seems pretty good right now. I'm not sure about the "Windows style change and the sound problem" yet because it happened ONCE yesterday but it was ONLY occasion when it has happened in the last two days but I hope I won't have that problem again after yesterday's ComboFix scan. I installed AVG a couple of hours ago and it doesn't seem to be having any problem with updating itself so that's good too. By the way, do you have any suggestions about which anti-virus software and Firewall I should use? Please let me know. And thank very very much for all of your help over the last couple of days. Thank you.

[ken545]

Hi,

I hope you uninstalled Kaspersky Internet Security 7.0 before you installed AVG, you only need one AV, more is overkill and will slow down your system. Its your preference in what AV you use, I have no favorite, just as long as you have one.

Before we deem your system clean, lets doublecheck , run this free online scan and it comes back clean I will provide links to free programs for you to install to help keep you more secure.


Please run this free online virus scanner from ESET

• Note: You will need to use Internet explorer for this scan
  
• Tick the box next to YES, I accept the Terms of Use.
  
• Click Start
  
• When asked, allow the activex control to install
  
• Click Start
  
• Make sure that the option Remove found threats is ticked, and the option Scan unwanted applications is checked
  
• Click Scan
  
• Wait for the scan to finish
  
• Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
  
• Copy and paste that log as a reply to this topic

[power333]

Yes, I removed KasperSky before installing AVG. ESET REPORT ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK # version=6 # iexplore.exe=6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) # OnlineScanner.ocx=1.0.0.5863 # api_version=3.0.2 # EOSSerial=d21c5e5f69569148a4634eb5974d1efa # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2009-06-19 01:53:41 # local_time=2009-06-19 07:23:41 (+0530, India Standard Time) # country="United States" # lang=9 # osver=5.1.2600 NT Service Pack 2 # compatibility_mode=1027 21 83 62 117915625000 # scanned=34706 # found=3 # cleaned=3 # scan_time=2500 C:\Documents and Settings\Sachin\My Documents\WIN XP\winxp_simulator.exe probably a variant of Win32/Agent trojan (deleted - quarantined) 00000000000000000000000000000000 C:\Documents and Settings\Sachin\My Documents\WIN XP\New Folder\xp_simulation_setup\Tutorial.exe probably a variant of Win32/Agent trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C:\Qoobox\Quarantine\C\WINDOWS\system32\xreftpd.dll.vir a variant of Win32/Conficker.X worm (cleaned by deleting - quarantined) 00000000000000000000000000000000

[ken545]

Great

ATF Cleaner <-- Yours to keep, run it now and then to clean out the clutter.

Malwarebytes <-- Yours to keep also, check for updates and run a scan now and then.

Combofix <---Is not a general cleaning tool, just run it with supervision or you can bork your system

• Click START then RUN
• Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  
  
  
  • 
  
  
• When shown the disclaimer, Select "2"

The above procedure will:

• Delete the following:
  • ComboFix and its associated files and folders.
  • VundoFix backups, if present
  • The C:\Deckard folder, if present
  • The C:_OtMoveIt folder, if present
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Reset System Restore.

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Keep in mind if you install some of these programs. Only ONE Anti Virus and only ONE Firewall is recommended, more is overkill and can cause you problems. You can install all the Spyware programs I have listed without any problems. If you install Spyware Blaster and Spyware Guard, they will conflict with the TeaTimer in Spybot , you can still install Spybot Search and Destroy but do not enable the TeaTimer .

Here are some free programs to install, all free and highly regarded by the fine people in the Malware Removal Community

• Spybot Search and Destroy 1.6
  Check for Updates/ Immunize and run a Full System Scan on a regular basis. If you install Spyware Blaster ( Recommended ) then do not enable the TeaTimer in Spybot Search and Destroy.
  
• Spyware Blaster It will prevent most spyware from ever being installed. No scan to run, just update about once a week and enable all protection.
  
• Spyware Guard It offers realtime protection from spyware installation attempts, again, no scan to run, just install it and let it do its thing.
  
• IE-Spyad
  IE-Spyad places over 6000 web sites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (cookies etc) from the sites listed, although you will still be able to connect to the sites.
  
• Firefox 3 It has more features and is a lot more secure than IE. It is a very easy and painless download and install, it will no way interfere with IE, you can use them both.

Safe Surfn
Ken

[power333]

I've done what you'd told me to do in your last post. I've also downloaded and installed the programs that you'd listed in your post. Thank you very much for all of your efforts and suggestions. Thank you.

[ken545]

Your very welcome, Take care, Ken

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.