AGain! REPEAT - I'M INFECTED [Closed]

You can get rid of these that were found:

C:\ProgramData\Spybot - Search & Destroy\Recovery\iCrossRider22.zip Win32/Bagle.gen.zip worm
C:\Users\All Users\Spybot - Search & Destroy\Recovery\iCrossRider22.zip Win32/Bagle.gen.zip worm

• open Spybot Search & Destroy
• click on the Recovery button in the left pane
• select the above entries and press the Purge selected items button
• close the program.

Regarding this, what exactly is it backing up?

D:\CICI-PC\Backup Set 2012-07-22 190001

My impression is that it backs up an SQL database.

Regarding these entries:

D:\CICI-PC\Backup Set 2012-07-22 190001\Backup Files 2012-07-29 201225\Backup files 1.zip Win32/Adware.SpyNoMore application
D:\CICI-PC\Backup Set 2012-08-05 190001\Backup Files 2012-08-05 190001\Backup files 1.zip Win32/Adware.SpyNoMore application
D:\CICI-PC\Backup Set 2012-08-26 194813\Backup Files 2012-08-26 194813\Backup files 1.zip Win32/Adware.SpyNoMore application

As they were last backed up in 2012, it appears that the presence of SpyNoMore, (a “rogue” program), is not a problem as long as you don’t use the 'Restore Database' option.

Are there any remaining problems?

Satchfan

i ran the spybot twice and both times it came back with no threats found….huh???????

There probably are no threats. You don't have to run a scan with it, just open it and follow the instructions to clean out what was previously found.

Please can you confirm that all is well and I'll provide instructions to tidy up. Thanks Satchfan

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic