We will keep the thread open until you return can review the information below. Please let me know once you've done the tool cleanup and if you have any further questions.
The following will implement some cleanup procedures as well as reset System Restore points:
- Click Start > Run
- Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
- [external image: Posted Image]
Now to remove most of the rest tools that we have used in fixing your machine:- Make sure you have an Internet Connection.
- Download OTC to your desktop and run it
- A list of tool components used in the cleanup of malware will be downloaded.
- If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
- Click Yes to begin the cleanup process and remove these components, including this application.
- You will be asked to reboot the machine to finish the cleanup process. If you are asked to reboot the machine choose Yes.
If you notice any remaining tools or files you can delete them by right clicking and choosing delete.
Don't worry about JavaRa. It was a quicker way to remove and reinstall Java but I've included info on how to update your Java in my final instructions below. Please go to Start / Control Panel / Programs and Features and remove any older versions of Java that are on your machine as they may contain security risks. You can then update to the latest version from the instructions below.
Great job! Your logs appear to be malware free and you do not appear to be experiencing any malware related problems.
Please follow these simple steps in order to keep your computer malware free and secure:
Set a New Restore Point to prevent possible reinfection from an old one.
Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.
The easiest and safest way to do this is:
* Go to
Start > Programs > Accessories > System Tools
* Click "
System Restore"
* Choose the radio button marked "
Create a Restore Point" on the first screen then click "
Next"
* Give the Restore Point a name then click "
Create".
The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
* Then go to
Start > Run and type:
Cleanmgr
* Click "
OK"
* Click the "
More Options" Tab.
* Click "
Clean Up" in the System Restore section to remove all previous restore points except the newly created one.
Visit Microsoft's Windows Update Site Frequently
It is important that you visit
http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
Use and Update your AntiVirus Norton Software
It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperitive that you update your Norton Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
Use a Firewall
Your log doesn't appear to show a third-party software firewall installed - if you have one, and I've missed it, please ignore this. I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this. Simply using a Firewall in its default configuration can lower your risk greatly.
If you are relying the firewall that comes with Windows, then you need to install one. While the Windows firewall is better than nothing, it doesn't monitor outgoing traffic, so anything malicious on your computer can 'phone home' at will. If you are using a wireless router that comes with a NAT hardware firewall, this also doesn't monitor outgoing connections.
Below are links to some free options:
Sunbelt Kerio OutPost
PC Tools Firewall Plus
Online Armor Free
]
After installing one of these, confirm your Windows Firewall is disabled by doing the following:
- Click Start, click Run, type Firewall.cpl, and then click OK.
- On the General tab, click Off (not recommended)
- Click OK.
For a tutorial on Firewalls and a listing of some other available ones see the link below:
Understanding and Using Firewalls
Make your Internet Explorer more secure
This can be done by following these simple instructions:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
1. Change the Download signed ActiveX controls to Prompt
2. Change theDownload unsigned ActiveX controls to Disable
3. Change the Initialise and script ActiveX controls not marked as safe to Disable
4. Change the Installation of desktop items to Prompt
5. Change the Launching programs and files in an IFRAME to Prompt
6. Change the Navigate sub-frames across different domains to Prompt
7. When all these settings have been made, click on the OK button.
8. If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.
You should update your version of the Adobe Flash to the newest version:
You should update your version of the Sun Java Platform (JRE) to the newest version:
- Download and install the latest version of Java
- Next, remove all older versions of the Sun Java Platform using the Control Panel's Add/Remove Program feature (as they may contain security vulnerabilities).
Install SpywareBlaster
SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
The download and tutorial on installing & using this product can be found here:
Using SpywareBlaster to protect your computer from Spyware and Malware
Run Malwarebytes Anti-Malware
Update and scan your computer with this program on a regular basis just as you would an antivirus software in conjunction with SuperAntiSpyware.
Install SUPERAntiSpyware Home Edition (free edition)
You should also scan your computer with this program on a regular basis just as you would an antivirus software in conjunction with Malwarebytes.
Perform an online virus scan
Every so often, also perform an online virus scan.
AntiVirus scanners use databases which are not identical, and one may find malware that another does not.
Some online scanners:
TrendMicro HouseCall:
http://uk.trendmicro-europe.com/consumer/h…call_launch.php
Panda ActiveScan:
http://www.pandasoftware.com/products/activescan.htm
Kaspersky Online Scanner (using Internet Explorer): http://www.kaspersky.com/virusscanner
BitDefender:
http://www.bitdefender.com/scan8/
To simplify making sure you have the latest version of many of your security programs and applications, you may want to consider:
Secunia's Personal Software Inspector (PSI). It is a free utility that scans your computer for installed applications and checks to see if they have the latest security patches and updates. If it finds any applications with possible security issues, links and/or instructions are provided for the necessariy updates.
Filehippo's Update Checker. It is free utilitiy that scan your computer for installed software, checks the versions and then sends this information to see if there are any newer releases. Available software updates are displayed and you can decide which ones to download and install. Among many other types of programs, they includes a number of the Anti-Spyware, Firewall/Security and Anti-Virus programs that have been recommended (though not all of them).
Note: Definition files should be updated from within the programs themselves. The Update Checker look for newer versions of the software program, not definition files.
Update all these programs regularly
Make sure you update all the programs I have listed regularly. Without regular updates you
WILL NOT be protected when new malicious programs are released.
Please also read Tony Klein's excellent article:
How I got Infected in the First Place
Follow this list and your potential for being infected again will reduce dramatically.
Hopefully this should take care of your problems! Good luck & Happy surfing!
