Directrdr with Windows XP and IE

jjkyota

Your logs appear to be clean. Please let me know if there are any outstanding issues or if everything is now running OK.

Meanwhile, we’ll tidy up your computer by removing the tools that have been used.


First

Follow these steps to uninstall Combofix• Click START then RUN
• Now type Combofix /uninstall in the runbox and click OK.
Note the space between the X and the /, it needs to be there.
🖼Click to load external image (Posted Image)
• Please follow the prompts to uninstall Combofix.
• Once it's finished uninstalling itself you will receive a message saying Combofix was uninstalled successfully.

Next

Uninstall OTL
• Double-click OTL.exe
• Click the CleanUp! button.
• Select Yes when the Begin cleanup Process? prompt appears.
• If you are prompted to reboot during the cleanup, select Yes.
• The tool will delete itself once it finishes, if not delete it by yourself.
NOTE: If you receive a warning from your firewall or other security programs regarding OTL attempting to contact the internet, please allow it to do so.

Satchfan

Satchfan, everything is running wonderfully on my computer. Thanks! You help and clear directions have been invaluable. I've successfully uninstalled both Combofix and OTL. jjkyota

Kristine

You have done a good job yourself by following the instructions so precisely.


I would imagine you have antivirus software on your server and a firewall on the router as I can see no evidence of either on your machine. I suggest that you check on this and if both exist, that’s fine – in the unlikely event that neither is installed, I suggest you do the following:

Firewall

Download one of the following firewalls:

• ZoneAlarm
• Sunbelt Personal Firewall

NOTE only install one firewall. Having more than one could cause many programs to stop working altogether. Also, the firewalls may get in each others' way and cause some security holes that would not be there with just one firewall.

Antivirus

Download one of the following:
• AVG Free
• Free Avast 4 Home Edition
• Avira AntiVir® Personal Edition Classic

===================================================


Windows updates

I notice that you have SP2, not SP3 installed. If this is by choice that’s up to you: however, without the latest Windows updates your system will be open to re-infection. I suggest you use the following link to download SP3 and get the latest Windows updates here:

NOTE: SP3, like SP2, includes a built-in firewall, which is turned on by default, therefore if you have another firewall installed, you will have to make sure Windows firewall is disabled.

To disable Windows firewall:
• Click on Start, Settings and then Control Panel
• Click on the Security Center icon.
• Click on the Windows Firewall icon
• Click Off (not recommended) and then click OK.
When you have done that:

Set your computer to automatically check for Windows updates.

To turn on Automatic Updates:
• Click Start, Settings and then click Control Panel.
• Double-click Automatic Updates.
• Choose Automatic (recommended).

===================================================

Internet Browsers:

You seem to use Internet Explore even though you have Firefox installed. Mozilla's Firefox browser and Opera are both far more secure than Internet Explorer. If you are interested in also trying Opera it can be downloaded from here.

If you choose to use Firefox as your default browser, I highly recommend these add-ons to keep your PC even more secure.• NoScript - for blocking ads and other potential website attacks
• McAfee SiteAdvisor - this tells you whether the sites you are about to visit are safe or not.
Both are a must if you do a lot of Googling.

If you prefer using Internet Explorer I highly recommend you do this:

Make your Internet Explorer more secure 1. From within Internet Explorer click on the Tools menu and then click on Internet Options.
2. Click on the Security tab
3. Click the Internet icon so it becomes highlighted.
4. Click on Default Level and click Ok
5. Click on the Custom Level button.

Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialise and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button. If it prompts you as to whether or not you want to save the settings, press the Yes button.

6. Next press the Apply button and then the OK to exit the Internet Properties page.
===================================================

I also recommend that you read the following:

“So how did I get infected in the first place”? by Tony Klein
"How to prevent malware" by miekiemoes

Remember to update and run Malwarebytes’ regularly, (at least monthly), to help your computer remain clean. You can never update too often and your computer will not be protected from new malware if your programs are not up-to-date.

all the stuff that's infected my computer, do you know if it's possible that it would have also infected our server?

To be honest I don’t know the answer to this.

It is probably best to pop over to our Networking forum here and start a new topic.

Safe computing

Satchfan

Hi Satchfan My computer is running better than it has in a loooong time. I downloaded the antivirus and firewall. It may already be on our server and router but clearly it didn't work. I also updated to SP3 and will look at Firefox as an internet browser. I don't have a preference, just never used it before. Thanks for the links to the articles, I'm on my way to read them now. I can't thank you enough for cleaning up my computer. I learned quite a bit in the process. Have a great weekend and thanks again! jjkyota

jjkyota You're very welcome Glad we could help. Have a good weekend yourself. Regards Satchfan

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.