[Resolved] Strange things

lightbrite,

I'm not seeing anything and Eset didn't find anything, I think your good.


Time for some housekeeping

• Click START then RUN
• Now type Combofix /u in the runbox and click OK
• Note the space between the X and the U, it needs to be there.
• [external image: Posted Image]

The above procedure will:

• Delete the following:
  • ComboFix and its associated files and folders.
  • VundoFix backups, if present
  • The C:\Deckard folder, if present
  • The C:_OtMoveIt folder, if present
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Reset System Restore.

Please re-enable any security that was disabled.

Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week
(Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall - I can not stress how important it is that you use a Firewall on your computer.
Without a firewall your computer is succeptible to being hacked and taken over.
I am very serious about this and see it happen almost every day with my clients.
Simply using a Firewall in its default configuration can lower your risk greatly.

For a tutorial on Firewalls and a listing of some available ones see the link below:

Understanding and Using Firewalls

Keep Microsoft Windows Updated - This will ensure your computer has always the latest security updates available installed on your computer. The easiest way to do this is to turn on Automatic Updates. Do this by:

• From your desktop, right-click on My Computer,
• click on Properties
• Select the Automatic Updates tab
• Click on Automatic
• Click on Apply button
• Click on OK to exit.

If there are new updates to install, install them immediately, until there are no more critical updates.

Install SpywareBlaster - SpywareBlaster will add a large list of programs and sites into your Internet Explorer
settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware

Download and install the free version of WinPatrol - This program protects your computer in a variety of ways and will work well with your existing security software.
Winpatrol


Update all these programs regularly - Make sure you update all the programs I have listed regularly.
Without regular updates you WILL NOT be protected when new malicious programs are released.


Only run one Anti-Virus and Firewall program.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein

Please respond back that you understand the above and let me know if you have any questions. Otherwise, this thread will be closed Resolved.

Hi there Tomk Thanks for all your help . I uninstalled Combofix , I try to have all my security up to date . I did change the active x to what you suggested .I did install blaster . I had that program before but for some reason I uninstalled it quite some time ago . What about Malwarebtyes is it a program to keep with blaster or uninstall ? Also if you can tell me was there anything that you found in all the log files sent ? lightbrite

lightbrite,

Malwarebytes is a good program to keep. I'd suggest that you start it, update it, and do a scan with it every month or so as a good check that nothing is there. It won't use any resources when not running so it should not be detrimental to your system.

Also if you can tell me was there anything that you found in all the log files sent ?

Yes, you had:
Vundo - a nasty little beastie that can be picked up alot of places because it is so prolific. It keeps working itself into your system and can render your computer completely unusable. You had a relatively light case.

A couple of Trojans - These are the information stealers. They commonly come from P2P but can be picked up just clicking on popups (that often come with Vundo)

A bunch of Adware. - This comes with alot of online poker sites. It can also be picked up from popups.

I was concerned that there might be a hidden rootkit causing the "strange" behaviors after you appeared to be clean. However, I didn't find any sign of one.


Any other questions?

Hi ,Tomk

No more questions , but just have to say I feel like a dope now cause I re-read the part of copy and paste
(Copy and paste the contents of the C:\ProgramFiles\EsetOnlineScanner\log.txt into your next reply along with a new HijackThis log.) Duh!! (never said I was the brightest one in the pack..lol

Anyway a big thanks ( ) for your help. I really appreciate it..

lightbrite

lightbrite, No problem. Glad we could help. Good Luck and be Well.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.