Hi miinutes,
The majority of the detections are files we have quarantined and will be removed when we remove the tools.
C:\Users\Miinutes\AppData\Local\Temp\AQ+O_1Wy.exe.part a variant of Win32/CasOnline.I application
C:\Users\Miinutes\AppData\Local\Temp\uR8AJ.exe a variant of Win32/CasOnline.I application
C:\Users\Miinutes\Downloads\BuzzLuck(1).exe a variant of Win32/CasOnline.I application
C:\Users\Miinutes\Downloads\BuzzLuck.exe a variant of Win32/CasOnline.I application
C:\Users\Miinutes\Downloads\LuckyRed.exe a variant of Win32/CasOnline.I application
C:\Users\Miinutes\Downloads\setup.exe a variant of Win32/CasOnline.I application
C:\Users\Miinutes\Downloads\SlotMadnessCasinoInstaller.exe a variant of Win32/CasOnline.I application
These are detections of a "potentially unwanted program" (PUP). Eset is just warning you of these programs just in case you weren't aware of their presence. PUPs won't infect you but may be installed as part of a package. Looking at the location of the files it would seem that they were knowingly downloaded. These came from RealTimeGaming Software.
You have several online gaming progrmams installed. These are required to enter the sites to play. If you do not want these programs they are:
Cool Cat Casino
Buzzluck Casino
Lucky Red
Slot Madness Casino
Liberty Slots Casino
21Dukes Casino
7Spins
Now I just need a way to keep malware viruses and other things off my computer or my teenage boys are gonna drive me insane any suggestions
Education is the best prevention tool.
I can't say for sure how the infection came to be on your computer. It could have been from clicking on something or visiting a website. Social sites such as FaceBook have a lot of unmonitored content posted with links to "Want to see something great?". What you end up with isn't something great. Bootm line don't click on anything they are not sure of. Same is true of unsolicated emails, just delete them unread.
Peer to Peer programs such s Limewire, uTorrent, etc are also a large source of infections. It's not the programs themselves that are dangerous but what can be downloaded with them usually from an unkown source.
We'll clean up the tools now.
From your desktop, please delete, if present
- any notepads/logs that we created
- FSS.exe
- FSS.txt
- TDSS.exe
- awMBR.exe
- mbr.dat
- mbr.zip
- jre-7u17-windows-i586.exe
- jre-7u17-windows-x64.exe
You can delete
FRST64.ex,
FRST.txt),
TDSSKiller.[Version]_[Date]_[Time]_log.txt ,
TDSSKiller_Quarantine from
C:\
Next
Disable your security programs for this first step. you can re-enable them afterwards.
Press the
Windows key and the
R key. A run box should open'. Copy and paste the following line into the box and click
OK
Combofix /uninstall
Next
Open
ADWcleaner and click the
uninstall button.
Next
Open
OTL then click the
Clean Up button. You may get prompted by your firewall that OTL wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click
Yes. This will do some clean up tasks and delete some of the tools you have downloaded plus itself.
I suggest you keep
MBAM. Keep it updated and use it regularly.
Updates and upgrades
Adobe Reader
You have an older version of
Adobe Reader. You can download the current version
HERE . Remember to decline any other installs that nay be offered.
You may want to consider
Foxit Reader instead. It may be a bit lighter on resources. If you choose to use Foxit
declne the foxit toolbar.
Visit their support forum
Foxit Forum
In either case you should uninstall
Adobe Reader 9.1.2 first. Be sure to move any PDF documents to another folder first though.
Some Recommendations and prevention tips
Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall. Those you have now.
You should also use
Spyware Blaster to help immunize your computer.
- SpywareBlaster will add a large list of programs and sites into your Internet Explorer
settings that will protect you from running and downloading known malicious programs.
OR
A guide to understanding and using the hosts file.
Learn how your Hosts file can protect you and how you can protect it.
Besides the Hosts file information, there are links to a very good updated hosts file, a host file manager. and some programs that can protect your hosts file.
HOSTS
Please read the info on disabling the DNS Client before installing a custom hosts file.
-Secure your
Internet Explorer
From within Internet Explorer click on the Tools menu and then click on Options.
- Click once on the Security tab
- Click once on the Internet icon so it becomes highlighted.
- Click once on the Custom Level button.
- Change the Download signed ActiveX controls to Prompt
- Change the Download unsigned ActiveX controls to Disable
- Change the Initialize and script ActiveX controls not marked as safe to Disable
- Change the Installation of desktop items to Prompt
- Change the Launching programs and files in an IFRAME to Prompt
- Change the Navigate sub-frames across different domains to Prompt
- When all these settings have been made, click on the OK button.
- If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the
Apply button and then the
OK to exit the Internet Properties page.
- Make sure you have reset Windows Updates to your chosen option. Click your start button > Control Panel > System and Security. under Windows Updates click turn
automatic updating on or off. Select the option you want.
- Keep your
antivirus program
updated, as well as any other security programs you have.
-More tips and programs can be found
HERE
Please post back if you have any problems.
Take care
