Win32:Malware-gen, BundleInstaller.Somoto, Trojan.Downloader [Solved]

I added Avira but i had to remove it (with Revo) because (don't laugh….ok u can) I couldnt remember the password rofl.gif

I think we've all done that at one time or another.

I now have Security Essentials

That's what myself and many other WTT team members use.

Any Browser suggestions?

I'm not an expert in this but I personally dislike Chrome and we've had many people come to us with problems linked with it.

I tend to use both IE and Firefox although IE is my default browser, (because I'm a bit of a Luddite and it is what I have grown up with). I would say that Firefox is the quickest but if you want expert advice on parental control/best browsers I'll give you a link to our Browsers, Internet & email forum when we tidy up.

Please let me know if there are any outstanding malware questions and, if you are happy that your computer is clean, we can clear up.

Satchfan

What other malware/antivirus/ security software should i be using along with security essentials?

What other malware/antivirus/ security software should i be using along with security essentials?

What other malware/antivirus/ security software should i be using along with security essentials?

Sorry about that. The page went blank, then i hit the back button and hit reply again and 3 replies came up. Oh are there ant tricks to uninstalling Chrome?

I'll advise about other protection when we clean up.

are there ant tricks to uninstalling Chrome?

You should be able to uninstall it normally through the Control Panel:

Start, Control Panel, Programs, and then Programs and Features.

If you have problems, look here.

Please let me know if there are any remaining problems: if not, we can tidy up.

Satchfan

One more thing… Once in awhile I and other users get an email saying its from a friend on my contact list with a message to go to a link that leads to a website that the antivirus usually blocks. Ive checked with the contacts and they have not sent the email. So something has gotten into my contact list as well as other users on this computer. Any advice? Other than that, I think we're almost done

Once in awhile I and other users get an email saying its from a friend on my contact list with a message to go to a link that leads to a website that the antivirus usually blocks

It sounds like your email account has been hacked into. You need to change your password and I’d suggest you start a thread in our Browsers, Internet and email forum here.


Your computer appears to be clean.

Now that you’re free from malware, as long as your computer seems to be running well, please follow these simple steps to tidy up you computer and decrease the likelihood of getting infected again:

Uninstall Combofix

Follow these steps to uninstall Combofix

• click START then RUN
• now type Combofix /uninstall in the runbox and click OK.

Note the space between the X and the /, it needs to be there.

🖼Click to load external image (Posted Image)

• please follow the prompts to uninstall Combofix.
• once it's finished uninstalling itself you will receive a message saying Combofix was uninstalled successfully.

===================================================

Uninstall OTL

• double-click OTL.exe
• click the CleanUp! button.
• select Yes when the Begin cleanup Process? prompt appears.
• if you are prompted to reboot during the cleanup, select Yes.
• the tool will delete itself once it finishes, if not delete it by yourself.

NOTE: If you receive a warning from your firewall or other security programs regarding OTL attempting to contact the internet, please allow it to do so.

===================================================

Uninstall AdwCleaner

• double click on adwcleaner.exe to run the tool
• click on Uninstall
• confirm with Yes.

You can delete all other logs and programs we’ve used that are on your desktop. Just click on them and press Delete.

===================================================

Antivirus

Your antivirus may not be enabled.

Click on Start, Programs, Microsoft Security Essentials.

Click on the “Home” tab and make sure that “Real time protection” is marked as “On”.

===================================================

Update installed programs

Your versions Java and Adobe Reader are out-of-date and need to be removed and updated. Having the latest updates ensures there are no security vulnerabilities in your system.

To remove them:

• click Start, Settings, Control Panel, Add or remove programs.
• click on Adobe Reader 9 and then Uninstall
• repeat this for other Adobe or Java entries

Go to ADOBE and download the latest version of Acrobat Reader.

NEXT

Install the latest version of Java:

Java

NOTE – when you install Java, before clicking on Install, be sure to Uncheck “Install the Ask Toolbar and make Ask my default search provider”

🖼Click to load external image (Posted Image)

===================================================

Recommended programs

SpywareBlaster. SpywareBlaster protects against bad ActiveX, it immunizes your PC against them. It blocks over 11,000 bad sites and uses no resources of your computer.

===================================================

Install Spybot - Search and Destroy which provides real time spyware and hijacker protection.

You can download and install Spybot Search and Destroy here

You should scan your computer with the program on a regular basis as you would with your anti-virus software.

===================================================

Update and run Malwarebytes. This really is an excellent program that you should also update and run on a regular basis, probably weekly.

===================================================

It’s important to keep programs up to date so that malware doesn't exploit any old security flaws.

FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated.

===================================================

MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

===================================================

I also recommend that you read the following:

How to prevent malware by miekiemoes

I will keep this open for 24 hours in case you have any problems, after which I’ll close the topic.

Safe computing

Satchfan

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.