As of 11;08 pm my time the scan was done at 7:34 have not heard any ads… i would if its ok with you like to keep this open though to make sure there are no more audio ads also if there is anything else that needs to be done after let me know as well…
I would be more than happy to keep this open for you. You were infected by a bootkit which is a very serious infection. Because of its nature, I can't guarantee that your PC will be completely clean and the only way to ensure this would be to reformat and reinstall windows. That's just something to keep in mind.
In the meantime, we can clean up the tools used.
Please delete DDS, aswMBR, TDSSKiller, and getPartitions.
Follow these steps to uninstall Combofix
* Click START
* Now type ComboFix /Uninstall in the searchbox and hit ENTER. Note the space between the X and the /, it needs to be there. (Note: There is a space between the ..X and the /U that needs to be there.)
Here are some tips to reduce the potential for spyware infection in the future:
Updates
It is very important that you keep your Operating System and applications up to date so that you will be less susceptible to malware.
It's a good idea to have Windows Update automatically download and install updates as they become available.
Secunia Online Software Inspector is a great tool that will tell you which of your applications are outdated and vulnerable to attack.
Run Anti-Virus Software
For an excellent list of free anti virus software, free online virus scanners, free spyware detection/removal and free firewalls, click here.
IMPORTANT! Please make sure you only have ONE firewall and ONE real-time antivirus installed on your system.
When using "on demand" scanners, first update the detection signature files, then disconnect from the internet and disable your resident security program before running the scan.
Once complete, remember to re-engage your resident security before going online.
Passwords
It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection.
This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles:
How to Prevent Malware by miekiemoes
PC Safety and Security–What Do I Need?
Additional Software
To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:
SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites. See tutorial here
MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements.
Google Chrome is a great alternative to Internet Explorer and Firefox.
Follow these steps, keep your antivirus program and antispyware programs updated, and scan with them on a regular basis. By doing so, your potential for being infected again will reduce dramatically.
Hopefully this should take care of your problems! Good luck.
Do you have any further questions?
**Please respond one more time to confirm your problem is resolved so I can close this thread.
Hi jonk1,
Again, I can't say for sure. The nature of this malware allows the remote hacker to download and install other software on your computer. We have cleaned it to the best of our abilities and your logs look to be free of malware. I would also recommend you change your passwords to important websites.
Hi jonk1,
You are very welcome :). The security software will make your computer a bit safer. Security in layers is always good, however there is no guarantee it will keep everything off.
