Facebook malware problem? Infected?

[asanguy]

Morning .

"C:\Program Files\Internet Explorer\iexplore.exe"

[Blade81]

Path looks ok. Next you could try to reset IE settings. Instructions here.

[asanguy]

Evening

Have got a solution for the yellow bar issue. It is only 1 item that it is causing it to appear and for now I will have to wait as the software does not currently have an IE8 fix.

Have had 1 instance today of multiple windows opening, but it was in facebook only. Touch wood none anywhere else.

There is something still something happening in eventvwr that has me worried my system is possibly not 100%.

In security I have instances of "audit failure" Category 529 in advapi
bad username/password. Microsofts explanation seems to suggest to me that someone/something has tried logging on to my system.
Excuse my stupidity if I have misunderstood and am worried over nothing.

[Blade81]

Hi,

That sounds like the thing described in this knowledge base article.

[asanguy]

Indeed it does, thanks.

So would you say I'm all clean and safe now? Or is that one issue with multiple windows still risky?

[Blade81]

Hi,

At least I couldn't spot anything out of ordinary there

[asanguy]

So do I need to uninstall any of the things used combofix dds etc?

[Blade81]

Hi,

Uninstall ComboFix:

• Click START then RUN
• Now copy-paste Combofix /uninstall in the runbox and click OK

Please download OTC and save it to desktop.

• Double-click OTC.exe.
• Click the CleanUp! button.
• Select Yes when the
  Begin cleanup Process?
  prompt appears.
• If you are prompted to Reboot during the cleanup, select Yes.
• The tool will delete itself once it finishes, if not delete it by yourself.

Note: If you receive a warning from your firewall or other security programs regarding OTC attempting to contact the internet, please allow it to do so.

You may also delete logs created during this process (dds.txt, attach.txt etc).

[asanguy]

Done

[Blade81]

Since this issue appears to be resolved ... this Topic has been closed. Glad I could help.

Note:If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread.

If it has been less than three days since your last response and you need the thread re-opened, please send me or other MOD a private message (pm). A valid, working link to the closed topic is required.