XP Malware Problem

[ken545]

Hello Roger,

You can run Avast and Spybot, there both two different programs, Avast is Anti Virus ( and you should never run more than one AV program ) and Spybot is Anti Spyware ( you can have more than one but not to many)

This is what I would do for your other computers, run a cleaner on them and also Malwarebytes and see if there is any improvement, if not feel free to post in the forum . If Malwarebytes picks up a lot of bad entries than I would definitely post so we can see whats going on, but start a new topic, one computer at a time or it can get pretty confusing.

You can up the security setting in IE and give it a try, you can always revert it back if your unhappy with it

Here is a good cleaner, we basically ran it when we ran the OTL fix, this is the stand alone by the same author

Download TFC to your desktop

• Close any open windows.
• Double click the TFC icon to run the program
• TFC will close all open programs itself in order to run,
• Click the Start button to begin the process.
• Allow TFC to run uninterrupted.
• The program should not take long to finish it's job
• Once its finished it should automatically reboot your machine,
• if it doesn't, manually reboot to ensure a complete clean

Please download Malwarebytes from Here or Here

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
  
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected .
• When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
• Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Post the report please



You can also run a free online virus scanner, go ahead and run this one and post the log, lets make sure we didnt miss anything, next post as I am exceeding the limit on graphics

[ken545]

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the icon on your desktop.
4. Check
5. Click the button.
6. Accept any security warnings from your browser.
7. Check
8. Make sure that the option "Remove found threats" is Unchecked
9. Push the Start button.
10. ESET will then download updates for itself, install itself, and begin
    scanning your computer. Please be patient as this can take some time.
11. When the scan completes, push
12. Push , and save the file to your desktop using a unique name, such as
    ESETScan. Include the contents of this report in your next reply.
13. Push the button.
14. Push

Please make sure you include the following items in your next post:
The log that was produced after running ESET Online Scanner.

[roger.f]

Actions performed as requested. See the logs/results below.

Again thank you so much....

Roger

---------------------------------------------
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.22.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
WandaS :: WANDAS [administrator]

6/21/2012 10:10:04 PM
mbam-log-2012-06-21 (22-10-04).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 242879
Time elapsed: 14 minute(s), 9 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
-----------------------------------------------------------------
ESET - One (1) threat found. See the following:

C:\Documents and Settings\WandaS\My Documents\Downloads\registrybooster.exe Win32/RegistryBooster application

[ken545]

Good Morning,

This may be a false positive but its not needed so lets delete it

C:\Documents and Settings\WandaS\My Documents\Downloads\registrybooster.exe


These type of programs that clean the registry are really not needed, sometimes they can do more harm than good, remove the wrong entries or entry and it can make your system unbootable so its best to stay away from them, registrybooster is from uniblue and the jury is out on them, I would not have any programs from them or any reg cleaners on any of my systems

[roger.f]

Hi Ken,

I deleted the file and could not find any evidence that it was installed. No entries in the Control-Panel/add-remove-programs. I found no directories in the c:/programs/ directory that seemed to be related to this program. Please let me know if I need to take any additional action.

Thank you so much!!!
Roger

[ken545]

Hello Roger,

I am not seeing any evidence of malware, just the tracking cookie issue but they can be flushed out now and then.

Is your computer still slow ?

[roger.f]

Actually it is running much better. Thank you so much...

Roger

[ken545]

Thats great Roger


Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups, any programs that where not removed you can just drag to the trash.


Malwarebytes is the free version and yours to keep and will not be removed

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Safe Surfn
Ken

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad I could help.