Login | Live Chat & Podcast at 1:00PM Eastern on Sunday! |
 Search | |
| |
18-Nov-2009, 10:04 PM
#1 | ||||||
| new type of rootkit???? |
| |
19-Nov-2009, 04:15 PM
#2 | ||||||
| |
19-Nov-2009, 07:27 PM
#3 | |||||
| Hello and welcome to TSG IMPORTANT Whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer. To make cleaning this machine easier:-
Make an uninstall list using HijackThis To access the Uninstall Manager you would do the following:
Please post this log on your next reply. Open Hijack This and select Do a System Scan Only place a check next to the below lines if still present
Once selected close all windows except HJT an click on Fix Checked Download and run Combofix This tool is not a toy and not for everyday use. ComboFix SHOULD NOT be used unless requested by a forum helper Please download ComboFix from one of these locations: Link 1 Link 2 * IMPORTANT !!! Save ComboFix.exe to your Desktop
 Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:  Click on Yes, to continue scanning for malware. When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply along with a fresh HijackThis log. If you need help, see this link: http://www.bleepingcomputer.com/comb...o-use-combofix Please reply with:-
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
19-Nov-2009, 11:21 PM
#4 | ||||||
| |
20-Nov-2009, 12:02 AM
#5 | |||||
| Hi, Please copy and paste all logs.  Can I have the uninstall list asked for in the first post, also please update me on the problems that you are having. Download and Run OTM.exe Download OTM.exe by Old Timer and save it to your Desktop.
Code: :Files d:\windows\_000003_.tmp.dll d:\windows\_000004_.tmp.dll d:\windows\system32\SET77.tmp d:\windows\system32\SETAD.tmp d:\windows\system32\SETC7.tmp d:\windows\system32\SETC8.tmp d:\windows\system32\SETCA.tmp d:\windows\system32\SETCC.tmp d:\windows\system32\SETCB.tmp d:\windows\system32\SETD0.tmp d:\windows\system32\SETD1.tmp d:\windows\system32\SETD3.tmp :Commands [EmptyTemp] [Start Explorer] [Reboot]
Please download SystemLook from one of the links below and save it to your Desktop. Download Mirror #1 Download Mirror #2
Please reply with:-
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
20-Nov-2009, 10:56 AM
#6 | ||||||
| |
20-Nov-2009, 10:59 PM
#8 | ||||||
| |
20-Nov-2009, 11:40 PM
#9 | |||||
| Quote:
Quote:
You should Download and Install the newest version of Adobe Reader for reading pdf files, due to the vulnerabilities in earlier versions. All versions numbered lower than 9.2 are vulnerable.
Update Java Runtime You are using an old version of Java. Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version. For this reason, it's extremely important that you keep the program up to date, and also remove the older more vulnerable versions from your system. The most current version of Sun Java is: Java Runtime Environment Version 6 Update 17.
ESET Online Scanner Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here. Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.
Please reply with:-
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
21-Nov-2009, 09:54 AM
#10 | ||||||
| |
21-Nov-2009, 08:42 PM
#11 | |||||
|
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
21-Nov-2009, 11:12 PM
#12 | ||||||
| |
22-Nov-2009, 12:21 AM
#13 | |||||
| Quote:
To make a new one, Click, start, control panel,the User account. Click on Create a New account, call it Guest1 for example. Follow the prompts to make it a limited user and create. Log into it and see if all is good, if it works as you want then you can delete the old one. As for the Philips Device Manager, try uninstalling and reinstalling. Other than that, Malware wise things are looking good, so if you are not having any further problems, I would suggest you proceed as follows. Remove Combofix
Let's clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if used inappropriately.
Now that the infection is gone lets try to keep it that way by following the below recommendations. Make your Internet Explorer more secure - This can be done by following these simple instructions:
Here are some free programs I recommend that could help you improve your computer's security. Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system. If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out. You can use one of these sites to check if any updates are needed for your pc. Secunia Software Inspector F-secure Health Check Install WinPatrol Download it from here Here you can find information about how WinPatrol works here Read some information here how to prevent Malware. Please reply if you have any problems or questions, and let me know how the NEW guest account goes.
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
22-Nov-2009, 08:11 PM
#14 | ||||||
| |
22-Nov-2009, 09:58 PM
#15 | |||||
| These days there is no one Antivirus that will protect you from all that is out there. Surfing habits play a huge part in staying clean. Being wary of what is downloaded and what link is clicked is part of the ‘staying safe process.’ NOD32 is deemed a good antivirus but that one is not free. I use Avira which is free and have no problems, but as I mentioned surfing habits play a part in it. Malwarebytes' Anti-Malware is a great tool to have on board. Run it weekly or whenever you feel that something could be wrong. It will clear out most things without having to go any further. Another that I use, and can be used daily, weekly etc is ATF (Atribune Temp File) Cleaner© by Atribune. Very small , sits on desktop, very easy to use and usually takes less than a minute. I agree, no need for Windows Defender, quite a resource hog as is AVG. I am concerned that Combofix ran and found something after we had finished cleaning, but the logs all look good now. I think you should manually clear you System Restore Point. Please create a new Restore Point To to this
Since we have created a New and Clean Restore Point, I would like you to remove all the Old Restore Points as some of these are infected and if used would re-infect your computer. To do this
I hope the above helps.
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
 |
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 03:03 AM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. |  |
Facebook
Twitter
TechGuy.tv
TSG Mobile