Dak
No problem 
sorry for the delay in getting back to you, i've been having some PC problems <_<
All clean!
Now, just a few steps to finish cleaning, some tidying up and some tips to prevent getting reinfected.
1) Flushing system restore
To remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected)
a. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
b. Reboot.
c. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
———–
2) Cleaning temp files
…incase some maliciouse files are hiding there.
Download and install CCleaner.
Double click the CCleaner icon, and make sure only the following are checked under the "windows" tab:
temporary internet files
empty recycle bin
temporary files
old prefetch data
Then click the 'applications' tab, and uncheck everything.
Now, click on "analyse" and then "run cleaner"
———–
3) Get rid of tools
you may as well delete killbox now, and the folder C:\!killbox, which contains backups of the viruses it deleted, which might annoy your anti-virus program
———–
4) Update windows
This is inportant! as it will fix lots of security flaws, and thus prevent many malwares from working on your computer.
Please visit the microsoft update site, click "express (reccomended)", and follow the onscreen instructions, to update to windows XP SP2 (service pack 2).
Afterwards, go back to the site and click "express (reccomended)" again to get all of the other security updates.
———–
5) Remove junk
The following aren't malware, but it may not be nessesary for them to start automatically when your computer boots. Every program that runs takes up memory, potentially slowing your computer down; so it's a good idea to stop the unnessesary/unwanted auto-starts. Unless otherwise stated, these items will still work, and will load as-and-when they are needed, or will need to be manually started.
goto start > run, and type in 'msconfig'. Click the 'startup' tab, and remove the check-mark next to any of the following that you dont want to keep:
IgfxTray Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel
QuickTime Task System Tray access to Apple's "Quick Time" viewer from version 5 onwards
Then click 'OK'.
———-
6) dubious programs
the following aren't malware, but you may or may not wish to remove them from your computer. it's entirely up to you.
incredimail: some privacy and security conserns. read more here
remove via start > control pannel > add/remove if you do not want it.
Finally,
How to remain clean
(The writing in green is a brief explanation of why each step is necessary. It is not necessary for you to read the green writing to understand what to do, but it is included for if you wish to know what each program does.)
you allready have anti-virus, anti-spyware, and a firewall
i'd also reccomend using a non-internet-explorer web browser, such as
Firefox
Or you can correctly configure internet explorer
Secure web-browsers are important for two reasons: one, firewalls allow web-browsers to send and receive information over the internet, so they represent a possible way for malware to get past your firewall, and two, the majority of things that you do on the internet will be done with a web-browser, and for this reason malware often targets them, attempting to redirect your web-browser to advertisement sites, or to steal your bank details if you enter them. For these reasons, it is important to have a secure web-browser
Things you should do regularly
At least once a month (and preferably more frequently), do the following:
manually update your anti-virus and anti-slyware programs (Spybot S&D, AVG-antispyware and AVG-antivirus) by using the update button on the programs' main display. Once you have, use Spybot S&D's 'immunise' button.
This is so that they have the latest list of how to recognise malware. Clicking Spybot S&D's 'immunise' button and Spywareblaster's 'enable all protection' button will ensure that those programs are protecting you from the newer additions to there slyware lists.
Scan for malware: use your AVG-antivirus, AVG-antispyware aand Spybot S&D to completely scan your computer for malware.
This is because, despite the protections which are in place on your computer, it is still possible to get infected by malware. Scanning every now-and-then should find any malware which has managed to 'slip through the net'.
Update windows: By visiting this site, or by the clicking 'windows update' in your start menu.
Security holes regularly get found in all different versions of windows. The update site releases 'patches', which fix the security holes, preventing malware from exploiting them
Extra things you can do, to prevent your computer slowing down to a crawl:
These aren't malware-related, but it is still advisable to do them regularly in order to keep your computer running smoothly.
Defragment your hard-drive: by clicking on the start menu, then going Programs –> Accessories –> System Tools –> Disk Defragmenter. Select 'analyse' and, if it suggests that you defragment your drive, click the 'defragment' button.
If a file on your computer needs to increase in size, but there is no free space near to it, then the file becomes split in two, being stored on two different locations on your hard-drive. This means that, when reading that file, the computer has to jump between two different locations on your hard-drive, slowing the computer down. 'Defragmenting' simply means moving files about so that the separate parts of a 'split' or 'fragmented' file are next to each other, forming one continuous file again.
Clean the junk off of your PC: by running CCleaner
Your PC accumulates a surprising amount of junk – temporary files which are no longer needed, registry keys left behind by a poorly uninstalled program, information about a term you entered into a search box a year ago, etc etc etc. These bits of 'junk' can get in your way and possibly slow your computer down. CCleaner gets rid of them.
If the infection(s) which you originally had come back, please post again in this thread.
If, at any point in the future, you have reason to believe that you have become infected again, you can get rid of the infection by:
Updating Spybot S&D, AVG-antispyware, and AVG-antivirus
Scanning with the above three programs.
Telling the above programs to fix anything that they find.
If you still have reason to believe that you are infected, or if you get infected in the future, then please do not hesitate to use this forum again
Thank you.
sorry for the delay in getting back to you, i've been having some PC problems <_<
All clean!
Now, just a few steps to finish cleaning, some tidying up and some tips to prevent getting reinfected.1) Flushing system restore
To remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected)
a. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
b. Reboot.
c. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
———–
2) Cleaning temp files
…incase some maliciouse files are hiding there.
Download and install CCleaner.
Double click the CCleaner icon, and make sure only the following are checked under the "windows" tab:
temporary internet files
empty recycle bin
temporary files
old prefetch data
Then click the 'applications' tab, and uncheck everything.
Now, click on "analyse" and then "run cleaner"
———–
3) Get rid of tools
you may as well delete killbox now, and the folder C:\!killbox, which contains backups of the viruses it deleted, which might annoy your anti-virus program
———–
4) Update windows
This is inportant! as it will fix lots of security flaws, and thus prevent many malwares from working on your computer.
Please visit the microsoft update site, click "express (reccomended)", and follow the onscreen instructions, to update to windows XP SP2 (service pack 2).
Afterwards, go back to the site and click "express (reccomended)" again to get all of the other security updates.
———–
5) Remove junk
The following aren't malware, but it may not be nessesary for them to start automatically when your computer boots. Every program that runs takes up memory, potentially slowing your computer down; so it's a good idea to stop the unnessesary/unwanted auto-starts. Unless otherwise stated, these items will still work, and will load as-and-when they are needed, or will need to be manually started.
goto start > run, and type in 'msconfig'. Click the 'startup' tab, and remove the check-mark next to any of the following that you dont want to keep:
IgfxTray Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel
QuickTime Task System Tray access to Apple's "Quick Time" viewer from version 5 onwards
Then click 'OK'.
———-
6) dubious programs
the following aren't malware, but you may or may not wish to remove them from your computer. it's entirely up to you.
incredimail: some privacy and security conserns. read more here
remove via start > control pannel > add/remove if you do not want it.
Finally,
How to remain clean
(The writing in green is a brief explanation of why each step is necessary. It is not necessary for you to read the green writing to understand what to do, but it is included for if you wish to know what each program does.)
you allready have anti-virus, anti-spyware, and a firewall
i'd also reccomend using a non-internet-explorer web browser, such as
Firefox
Or you can correctly configure internet explorer
Secure web-browsers are important for two reasons: one, firewalls allow web-browsers to send and receive information over the internet, so they represent a possible way for malware to get past your firewall, and two, the majority of things that you do on the internet will be done with a web-browser, and for this reason malware often targets them, attempting to redirect your web-browser to advertisement sites, or to steal your bank details if you enter them. For these reasons, it is important to have a secure web-browser
Things you should do regularly
At least once a month (and preferably more frequently), do the following:
manually update your anti-virus and anti-slyware programs (Spybot S&D, AVG-antispyware and AVG-antivirus) by using the update button on the programs' main display. Once you have, use Spybot S&D's 'immunise' button.
This is so that they have the latest list of how to recognise malware. Clicking Spybot S&D's 'immunise' button and Spywareblaster's 'enable all protection' button will ensure that those programs are protecting you from the newer additions to there slyware lists.
Scan for malware: use your AVG-antivirus, AVG-antispyware aand Spybot S&D to completely scan your computer for malware.
This is because, despite the protections which are in place on your computer, it is still possible to get infected by malware. Scanning every now-and-then should find any malware which has managed to 'slip through the net'.
Update windows: By visiting this site, or by the clicking 'windows update' in your start menu.
Security holes regularly get found in all different versions of windows. The update site releases 'patches', which fix the security holes, preventing malware from exploiting them
Extra things you can do, to prevent your computer slowing down to a crawl:
These aren't malware-related, but it is still advisable to do them regularly in order to keep your computer running smoothly.
Defragment your hard-drive: by clicking on the start menu, then going Programs –> Accessories –> System Tools –> Disk Defragmenter. Select 'analyse' and, if it suggests that you defragment your drive, click the 'defragment' button.
If a file on your computer needs to increase in size, but there is no free space near to it, then the file becomes split in two, being stored on two different locations on your hard-drive. This means that, when reading that file, the computer has to jump between two different locations on your hard-drive, slowing the computer down. 'Defragmenting' simply means moving files about so that the separate parts of a 'split' or 'fragmented' file are next to each other, forming one continuous file again.
Clean the junk off of your PC: by running CCleaner
Your PC accumulates a surprising amount of junk – temporary files which are no longer needed, registry keys left behind by a poorly uninstalled program, information about a term you entered into a search box a year ago, etc etc etc. These bits of 'junk' can get in your way and possibly slow your computer down. CCleaner gets rid of them.
If the infection(s) which you originally had come back, please post again in this thread.
If, at any point in the future, you have reason to believe that you have become infected again, you can get rid of the infection by:
Updating Spybot S&D, AVG-antispyware, and AVG-antivirus
Scanning with the above three programs.
Telling the above programs to fix anything that they find.
If you still have reason to believe that you are infected, or if you get infected in the future, then please do not hesitate to use this forum again
Thank you.