Am i still infected?

[sypko]

also i ran

combofix /uninstall as Jacee advised me,

so i dont have restore points anymore.. i have a fresh one though.

[ken545]

All those files where found in System restore, lets do this


System Restore is a component of Microsoft's Windows Me, Windows XP, Windows Vista and Windows 7 operating systems that allows for the rolling back of system files, registry keys, installed programs, etc., to a previous state in the event of malfunctioning or failure. Old restore points can be a source of re-infection.

Please follow the steps below to create a clean restore point:

1. Click Start > Run > copy and paste the following into the run box:
   
   %SystemRoot%\System32\restore\rstrui.exe
2. Press OK. Choose Create a Restore Point then click Next.
3. Name it (something you'll remember) and click Create.
4. When the confirmation screen shows the restore point has been created click Close.

Then remove all previous Restore Points

1. Click Start > Run > copy and paste the following into the run box:
   
   cleanmgr
2. Choose to scan drive C:\ (if C:\ is your main drive).
3. At the top, click on More Options tab. Click the Clean up... button in the System Restore box.
4. Click on the Yes button.
5. When finished, click on Cancel button to exit.

How is your system behaving now ?

[sypko]

Good morning Ken.

I have done everything as you said..

but have a look at my post number #31

i ran a combofix /uninstall yesterday so i already had no restore points..

it just created a new one..

anyway my system is working fine
now i have some "backups" files or Quarantined files in my

- online eset scan folder
- malvarebytes folder
- hi jackt this backups folder..

Nearly i forgot, here is a huge hug from Jacee for you

[ken545]

Just got a valentines Day card from Jacee

You can open these and delete all the back up or quarantined entries

- online eset scan folder
- malvarebytes folder
- hi jackt this backups folder..

This will get rid of most of that also

Open OTL and click on Clean Up and it will remove most programs we used to clean your system along with there backups

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Safe Surfn
Ken

[sypko]

Hi Ken, it is time to thank you for all your professional help and patience with me.
I really appreciate everything you have done for me without without expecting something in return.

I like the community here, how they are helpful, how you cooperate with each other. I have become interested in malware removal process, and i would be happy to help others as you do, but i am sure it is a difficult process to learn and i am afraid i dont have a time to sign for some lessons. They would probably dont want me with my "language" skills though

Anyway I am truly grateful to you and i like you so much for being such an unselfish and helpful person. On the other hand i really hope i will never ever need your help again.

Thank you wholeheartedly dear Ken and have a

Happy Valentines day

[ken545]

Thank You

Removing this garbage gets more difficult each day, not like a few years ago when win 95 came out. Not only is this stuff annoying, it can also be dangerous. Cyber Criminals write this stuff and its all geared to stealing anything they can from you , like credit card, Bank Account numbers, your passewords for sites that do online banking and shopping.


http://forums.whatthetech.com/index.php?showtopic=80368
You can snoop around here if you wish, becoming a member of the malware removal community is a great feeling, I have made many many friends. It does take a commitment, it normally takes a year or more before we have you trained and feel that your able to help users on your own. The above site has a Malware Removal Classroom and I am a teacher at that site.

Take Care,
Ken

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad I could help.