Malware problem

[derarne]

Hey!

Submitted the file.

Ran the hostexpert program.

/Best Regards DerArne

[Dakeyras]

Hi.

I have checked the file submission and further analysed the file myself. It appears to be a false positive detection so no further action will be required.

Any other issues remaining with your girlfriends machine and or any instances of the original problems overall?

[derarne]

Hi!

I have not dared to log in on any of the applications from my girlfriends computer so far, but I have logged in a couple of times from mine without finding anything weird.

My girlfriends computer seems to run ok.. faster than before.

The only thing that worries me a bit is that we have not really found anything to know that we have gotten rid of the problem or have we!?

But things seems fine at the moment .. not intrusions for a couple of days.

Which programs should I ad to the laptop!?

/DerArne

[Dakeyras]

Hi.

I have not dared to log in on any of the applications from my girlfriends computer so far, but I have logged in a couple of times from mine without finding anything weird.

OK.

My girlfriends computer seems to run ok.. faster than before.

The only thing that worries me a bit is that we have not really found anything to know that we have gotten rid of the problem or have we!?

We have removed very minor malware related files from both machines but overall I suspect it was your Router not being secure at the time coupled with the fact someone had gained access to your accounts and not necessarily via actually accessing either machines persay. Though also the distinct possibility that this infection on your girlfriends machine was the culprit also.

You have changed all passwords associated and when completed my instructions below both machines should be both safe and secure to use online. As long as you follow my advice there may always be chance of infection but as long as you observe safe online practises and both update and scan regularly this will go a long way towards overall online security.

I cannot advise strongly enough though steer clear of absolutely anything P2P related in future. I have dealt with so many infected machines that the use of the aforementioned applications was a major conduit for malware to gain a foothold.

Next:

Congratulations your girlfriends computer appears to be malware free!

Most of the advice below is quite similar to what I posted prior here for yourself but basically just clean up advice pertaining to your girlfriends machine as you mentioned you did bookmark my original advice.

Clean up with OTL:

• Right-click OTL and select Run as Administrator to start the program.
• Close all other programs apart from OTL as this step will require a reboot.
• On the OTL main screen, depress the CleanUp button.
• Say Yes to the prompt and then allow the program to reboot your computer.

The above process should clean up and remove the vast majority of scanners used and logs created etc.

Any left over merely delete yourself and empty the Recycle Bin.

Reset the System Restore points:

Create a new, clean System Restore point:-

• Right click on Computer and select Properties >> System protection >> Create.
• Give this restore point a descriptive name and click Create.
• When done, click Apply >> OK.

Note: Do not clear infected/old System Restore points before creating a new System Restore point first!

Flush Old System Restore points:-

• Right click on Computer and select Properties >> System protection.
• (untick) Vista C system box an click Turn off system restore then Apply >> OK.
• Restart your computer.
• Navigate back to System protection >> (tick) Vista C system box >> Apply >> OK

Now some advice for on-line safety:

Malwarebyte's Anti-Malware:

This is a excellent application and I advise you keep this installed. Check for updates and run a scan once a week.

Other installed security software:

The presently installed security application, avast! Antivirus automatically checks for updates and downloads/installs them with every system reboot and or periodically if the machine is left running providing a internet connection is active.

I advise you also run a complete scan with this also once per week.

Erunt:

Emergency Recovery Utility NT, I advice you keep this installed as a means to keep a complete backup of your registry and restore it when needed.

Myself I would actually create a new back up once per week as this along with System Restore may prove to be invaluable if something unforeseen occurs!

Keep your system updated:

Microsoft releases patches for Windows and other products regularly:

• Click on Start(Vista Orb) >> All Programs >> Windows Update.
• In the navigation pane, click Check for updates.
• After Windows Update has finished checking for updates, click View available updates.
• Click to select the check box for any found, then click Install.
• When completed Reboot(restart) your computer if not prompted to do so.

Install WinPatrol:

WinPatrol alerts you about possible system hijacks, malware attacks and critical changes made to your computer without your permission.

Download it from here.

You can find information about how WinPatrol works here.

Next:

Any questions? Feel free to ask, if not stay safe!

[derarne]

Hi!

Ok .. cleaned up the system with otl.

Made a new system restorepoint.. dumped the old ones.

Installed the programs I did not have.

Which real-time malware program should I have besides doing my weekly checks? spybot?

How long will this thread stay if I want to go back and read some stuff once again!?

And once again.. thankyou,thankyou,thankyou..

It has been an honour.

Best regards DerArne

[Dakeyras]

Hi.

And once again.. thankyou,thankyou,thankyou..

It has been an honour.

You're most welcome!

How long will this thread stay if I want to go back and read some stuff once again!?

Actually once it is archived here you will be able to access it for quite some time, probably not indefinitely but for the foreseeable future anyway and the oldest topic in that part of the forum is nigh on five years old now.

Which real-time malware program should I have besides doing my weekly checks? spybot?

You could actually consider purchasing a licence for Malwarebytes' Anti-Malware. I use the Real Time protection feature myself on all my machines that have a active internet connection and on my Wife's laptop. Though you would need to actually disable the in-built Windows Defender. How to exactly can be read here.

Now if you have opted to re-install Spybot Search & Destroy my advice would be keep as a on-demand scanner only and do not use either the immunisation feature or registry guard as both of these features are actual covered by the Host-File I advised and WinPatrol. If you do a system conflict will occur and overall online protection will be compromised.

This topic here in Safer Networking is worth reading:-

So how did I get infected in the first place? and is updated periodically, so worth bookmarking/add to favourites.

This is also a good resource:- How to prevent Malware.

[Dakeyras]

In the event you have not re-enabled the CD Emulation drivers on your girlfriends computer, do so as outlined here. The same procedure pertains except select the option Disable.

--------------

Since this issue appears to be resolved ... this Topic has been closed. Glad I could help.

Note: If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh set of the requested logs and a link to your previous thread.

If it has been less than three days since your last response and you need the thread re-opened, please send me or your helper a private message (pm). A valid, working link to the closed topic is required.