[Resolved] error getting scan progress

System seems to be running ok now. no hijacks at all. below is the kaspersky scan KASPERSKY ONLINE SCANNER 7.0: scan report Thursday, August 20, 2009 Operating system: Microsoft Windows XP Home Edition Service Pack 3 (build 2600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Friday, August 21, 2009 02:24:10 Records in database: 2667746 ——————————————————————————– Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ Scan statistics: Objects scanned: 49284 Threats found: 4 Infected objects found: 6 Suspicious objects found: 0 Scan duration: 01:02:20 File name / Threat / Threats count C:\Qoobox\Quarantine\C\WINDOWS\system32\sdra64.exe.vir Infected: Trojan-Spy.Win32.Zbot.aadr 1 C:\UBCD4Win\plugin\Disk\Partition\MbrFix\MbrFix.exe Infected: not-a-virus:RiskTool.Win32.MBRFix.a 1 C:\UBCD4Win\plugin\Network\ultravnc\files\sfx\winvnc.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.ac 1 C:\UBCD4Win\plugin\Network\ultravnc\files\winvnc.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.ac 1 C:\UBCD4Win\plugin\Network\VNCServer\vncconfig.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.ad 1 C:\UBCD4Win\plugin\Network\VNCServer\winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.ad 1 Selected area has been scanned.

mcafee,

Log looks good


Time for some housekeeping

• Click START then RUN
• Now type Combofix /u in the runbox and click OK
• Note the space between the X and the U, it needs to be there.
• [external image: Posted Image]

The above procedure will:

• Implement some cleanup procedures.
• Reset System Restore.

Please re-enable any security that was disabled.

Now to remove most of the tools that we have used in fixing your machine:

• Make sure you have an Internet Connection.
• Download OTC to your desktop and run it
• A list of tool components used in the cleanup of malware will be downloaded.
• If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
• Click Yes to begin the cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the cleanup process. If you are asked to reboot the machine choose Yes.

The following is my standard advice for the future. Use what you can and pat yourself on the back for what you're already doing.

Please take time to read Preventing Malware - Tools and Practices for Safe Computing. Very important information for your consideration is contained therein.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein


Also: "How to prevent malware"
by miekiemoes

Please respond back that you understand the above and let me know if you have any questions. Otherwise, this thread will be closed Resolved.

Thank you so much for your patience and help. I tried to run the ComboFix /u but it gives me the message below and I do not think it ran. "Windows cannot find ComboFix /u. Make sure you typed the name correctly then try again." I also read "How to prevent Malware" I tried to disable autorun and when try to run gpedit.msc it gives me same message?

mcafee,

If you have ran OTC, then ComboFix is gone.

I tried to disable autorun and when try to run gpedit.msc it gives me same message?

Autorun is already disabled. What was the message?

Windows cannot find ComboFix /u. Make sure you typed the name correctly then try again.

mcafee,

Please try sVchost /u

Have you ran OTC?

Yes

YES I ran TFC. also Please try sVchost /u gives message Windows cannot find sVchost /u. make sure you typed the name correctly

mcafee, If you ran OTC, it should be gone. If the icon is gone from your desktop, it's gone.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.