[Resolved] my windows defender says everything is fine

Ok I put it in combofix /u in and it says that windows cannot find combofix. Make sure you typed in the name correctly and try again. Which I have been doing several times and, I even copied and paste it in but that message still comes up.

then it is already removed. If there are any logs or tools I had you download left on your desktop right click and delete. Keep the MalwareBytes program, that one is useful. Update and run it once a month or so, to keep your system clean.

Now do the following:

First you’ll need to open a command prompt in administrator mode by right-clicking and choosing “Run as administrator” (or use the Ctrl+Shift+Enter shortcut from the search box)

[external image: Posted Image]

Type the following command at the command prompt:

net user administrator /active:no

[external image: Posted Image]

The administrator account will now be disabled, and shouldn’t show up on the login screen anymore.


NEXT:

Below I have included a number of recommendations for how to protect your computer against malware infections.

• It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
  Strong passwords: How to create and use them
  Then consider a password keeper, to keep all your passwords safe.
  
• Keep Windows updated by regularly checking their website at :
  http://windowsupdate.microsoft.com/
  This will ensure your computer has always the latest security updates available installed on your computer.
  
  
• SpywareBlaster protects against bad ActiveX, it immunizes your PC against them.
  
  
• SpywareGuard offers realtime protection from spyware installation attempts. Make sure you are only running one real-time anti-spyware protection program ( eg : TeaTimer, Windows Defender ) or there will be a conflict.
  
  
• Make Internet Explorer more secure
  
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.
• ATF Cleaner - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
  
  
• MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
  
  WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  • Green to go
  • Yellow for caution
  • Red to stop
  WOT has an addon available for both Firefox and IE
  
  
• Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more
  secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up
  blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
  Here
  
  
  If you choose to use Firefox, I highly recommend this add-on to keep your PC even more secure.
  
  • NoScript - for blocking ads and other potential website attacks
• Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
  
• ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
  
• In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:
  Think Prevention.
  PC Safety and Security–What Do I Need?.

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.


Thank you for your patience, and performing all of the procedures requested.

Please respond one last time so we can consider the thread resolved and close it, thank-you.

Hi, ok im back on my usual account and i put in the command in command prompt and it says system error 5 has occurred. My hompage has not changed back either it is suppose to be www.yahoo.com and it still is www.m.yahoo.com/?fr=fptb-. I went to make sure that my homepage was the same in internet options under general it was. My homepage was back to what it was suppose to be in the administrator account but not in this one.

To change your homepage:


1. First, open your Internet Explorer browser.

2. Navigate to the web page that you want to become your home page. ( http://www.yahoo.com - type that in the address bar of your browser)

3. Click on the arrow to the right of the Home button, located on the far right hand side of your IE Tab Bar

[external image: Posted Image]

4. The Home Page drop-down menu should now be displayed. Select the option labeled Add or Change Home Page….

[external image: Posted Image]


5. The Add or Change Home Page window should now be displayed, overlaying your browser window. (The first piece of information displayed in this window is the URL of the current page. In the example below, this is http://www.about.com. - yours should be http://www.yahoo.com)

[external image: Posted Image]



NEXT:

Please advise if the administrators account is still visible?

If it is…try these directions

To Disable the Administrator Account

• Open the command prompt with Administrative privileges by opening the Start Menu, and typing cmd in the search box, and then press Ctrl+Shift+Enter
  
  or you can click the Start orb, > All Programs, > Accessories, > right-click Command Prompt and select Run as Administrator.
  
• Type the following in the command prompt and press Enter after:
  
  

  net user administrator /active:no

• Restart your computer and logon with your usual account.

Hi ok the administrators account is not visable anymore and, I tried that but, when I type in www.yahoo.com in redirects to http://m.www.yahoo.com/?fr=fptb. Another question my System Shield expires on the 24th of this month should I still keep it or let it go and stick with what you told me and my Windows Defender or keep it in addition with everything else?

Hi,

If you really liked system shield, then stick with it.

If you would like to try another antivirus, there are plenty of excellent free ones available.

I recommend Avira:

Avira AntiVir Personal

as for the home page…i don't use yahoo, so cant advise, but the link you provided, changed the Yahoo page to the Yahoo for my County, so it's probably something Yahoo does.


If you are concerned about that, post a new topic in our Browsers Internet and email forum asking about the settings.

Post a link back to this topic so they can see you are malware free.

good luck and

stay safe

~CB

Hi, I went back and tested that page again. it asked me whether I wanted to stay on yahoo Canada or go back to yahoo.com on a button on the top right of my screen. when I went back to yahoo.com it stayed there…look for that option yourself…once you are back to yahoo.com - then set it as your home page following the previous instructions Yahoo knows where you live based on the IP address, just trying to provide the best customer service i guess (that's why google's my home page)

Thank you so much you were really patient with me and took your time with me. I'm sorry I asked so many questions but, I wanted to make sure everything would go alright. Thank you so very much and, thanks for the tips.

You are more than welcome, no need to apologize for asking questions, that's what we are here for. stay safe ~CB

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.