Search:

I have McAfee 7.2 installed...

I was using the malware forum last week, got everything cleaned up and as I was advised by the malware security expert, I also downloaded Spybot S & D, Adaware, and...

Alright, so I click updates which is recommended every week, and then which USA flag do I check ? Then it asks what do I want to check for- I click "Immunization" and then says please check a file...

saw Fiat1300 post after my last one to just close spybot after checks- thanks.
And it turns out that last registry entry was also part of adobe so i allowed it.

As you said fiat1300, I might just...

ok thanks, but after the scan and the checks are up as "cleaned" do I just close S & D- is it all done, there's no "exit" ? I read the tutorials, but to someone who doesnt understand computer lingo,...

I clicked allow change, thinking it means that its ok to be installed from my side ??? Another one popped up...Browser Helper Object, Key Added, Entry (with a bunch of numbers)

I've been...

OK, another...

Just updated Adobe install and S & D window popped up saying it detected an important registry entry, system start up global entry, value added, Adobe speed launcher, allow change,...

How often should I run S & D and does it need to be done for both sides/administrators ?

After scan and clicking on "fix" and the green checkmarks are up, do you do anything else or just close it...

OK Shaba, things seem to be working great.
Updated Java, Adobe, System Restore, and installed OTMoveit and Comodo BOClean !

How come when I updated Adobe, it isnt listed in installed programs,...

great, now it's on desktop thanks. Only Java 2 is listed in programs, that's the one I'm going to remove right ?

this time it worked, clicked the exact same button as last time. All of my programs are automatically saved to desktop, but it's not showing up there. It downloaded but Java 2 Runtime is the only...

the offline like you said

its not on desktop, but it did open after trying again and brings me to a Sun Download Manager page, "select dirctory of download files" log file size, overwrite behavior ???

well i clicked exit as that was only option and its not on desktop?

I kew id be back right away...trying to open java download and this Security Warning popped up..

"Failed to verify authenticity of this certificate because error parsing the certificate. No...

sorry but whats the correct way to reboot after that step before installing new version of Java ?"

ok, do i need to do this since I use netscape and not IE ?

* Make your Internet Explorer more secure - This can be done by following these simple instructions:
* From within Internet...

Wow, that's a lot to do for this beginner- is it imperative that I do all of these ?

How do I do this..Isn't Spybot my antivirus software ?

Update your AntiVirus Software - It is imperitive...

Its been working great this morning, let's do a final cleanup, remember that's when I got re-infected yesterday.

ok sorry, does this mean anything ?
And should I run any other scan right now?

From McAfee...

Threat Profile: PrcViewer
Risk Assessment
- Home Users: N/A
- Corporate Users: N/A...

also on the automatic McAfee scan, "PrcViewer" says it cant be completely removed- any issues with this ?

But things do seem to moving a little more slowly too ??

Hi Shaba! Emptied that file and desktop is blue again- no pop ups- should I do any other scans ?

New HJT scan...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:41:47 PM, on 12/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)...

New Kaspersky Scan...

Thursday, December 27, 2007 2:36:43 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:21:16 AM, on 12/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
...

ComboFix 07-12-21.4 - Amy Lynch 2007-12-27 8:13:08.5 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.120 [GMT -7:00]
Running from: C:\Documents and Settings\Amy...

Updated HJT log...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:11:31 PM, on 12/26/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)...

well, I dont know what to do next and I gotta run out for a few hours- please leave instructions for when I return. Thank you!

And AdBreak...what's going on Shaba, it's like we're back to square one with all the spyware infections popping up ???

TrojanDownloaderXs just popped up too ??

And now the desktop is black again with the red warning !! What's happening ?? I haven't seen that for days ??

The "your computer is infected with spyware" just came up from bottom ??

Just want to make sure you want me to uninstall those programs right- not just send to recycle bin ?? And you tell me when we're 100% finished- thank you again !

Things seem to be going fine, I guess I wont know if I have any other issues unless something comes up.
And should I leave Vundofix, SmitfraudFix, Combofix, HJT and Kaspesky scan results on the...

OK, did that and now they're gone from desktop.

I dont think I have any problems, do I need to do any final scans- HJT log ? Does this mean that all the junk is gone ?
And if I'm not doing any...

theres now also a bunch of files "WRL' and "Thumbs" on desktop ??

OK found it and deleted the files you said and emptied recycle bin. What's next ?

Application Data is in Owner File and its a Symantec folder that's empty ??

OK, but I dont see this in there.

Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\

Under documents and settings/all users I dont see application data....

Are you sure about emptying the Documents and Settings file- that's gonna delete a lot of stuff, all settings and all items on desktop ???

and wheren is this file ??

Delete this file:

C:\WINDOWS\system32\0.7962458.exe

I'm also removing all the files with our names on them, Desktop items, etc, in documents and settings- this wont mess anything up ? ?

And when I click ctrl/a it says that this folder contains one...

and I'm removing spybot s & d ??

well there's no local drive C, there's local Disc C ??

Hi Shaba- not quite sure how to find and empty those?

Fresh HJT log...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:56:11 PM, on 12/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)...

OK Shaba, here's the Kaspersky results....
Fresh HJT in next post.


Tuesday, December 25, 2007 12:52:48 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)...

Great, it's downloading the files now. I'll keep you posted, Thanks Shaba!

The kaspersky Initializing scan stopped and gave me the smae message:

Failed to load Kaspersky Online Scanner ActiveX control!

You must have administrative rights on this computer;
you also...

OK, thanks changed it to Enable. It's now asking if I want to install kavwebscan_unicode.cab ?