Need Help with virus that wont go away

[ken545]

Hi,

It removed those bad entries. The rest of your log looks fine.

Lets update your Java to make your system more secure

Go to your Control Panel and click on the Java Icon ( looks like a little coffee cup ) click on About and you should have Version 6 Update 14, if not proceed with the instructions.

Download the latest version Here save it, do not install it yet.

Java SE Runtime Environment (JRE)JRE 6 Update 14 <--The wording is confusing but this is what you need

• Go to your Add Remove Programs in the Control Panel and uninstall any previous versions of Java
• Reboot your computer
• Install the latest version

You can verify the installation Here



How are things running now??

[HUGHE.G]

Well, everything looks good but every time i do a reboot security center continues to say that my anti-virus status is unknown i am not sure if this is a normal problem or it might just be out of date.

[ken545]

The Security Center will do that, run Norton and make sure it up to date, if not some bad stuff can access your computer. If its out of date than you need to purchase the program for another year. If you decide not to update, then uninstall Norton and you can install one of these free programs.

Free Anti Virus Programs

• AVG Free
• Free Avast 4 Home Edition
• Avira AntiVir® Personal Edition Classic

Malwarebytes <-- Yours to keep also, check for updates and run a scan now and then.

Combofix <---Is not a general cleaning tool, just run it with supervision or you can bork your system

• Click START then RUN
• Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  
  
  
  • 
  
  
  
• When shown the disclaimer, Select "2"

The above procedure will:

• Delete the following:
  • ComboFix and its associated files and folders.
  • VundoFix backups, if present
  • The C:\Deckard folder, if present
  • The C:_OtMoveIt folder, if present
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Reset System Restore.

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Keep in mind if you install some of these programs. Only ONE Anti Virus and only ONE Firewall is recommended, more is overkill and can cause you problems. You can install all the Spyware programs I have listed without any problems. If you install Spyware Blaster and Spyware Guard, they will conflict with the TeaTimer in Spybot , you can still install Spybot Search and Destroy but do not enable the TeaTimer .

Here are some free programs to install, all free and highly regarded by the fine people in the Malware Removal Community

• Spybot Search and Destroy 1.6
  Check for Updates/ Immunize and run a Full System Scan on a regular basis. If you install Spyware Blaster ( Recommended ) then do not enable the TeaTimer in Spybot Search and Destroy.
  
• Spyware Blaster It will prevent most spyware from ever being installed. No scan to run, just update about once a week and enable all protection.
  
• Spyware Guard It offers realtime protection from spyware installation attempts, again, no scan to run, just install it and let it do its thing.
  
• IE-Spyad
  IE-Spyad places over 6000 web sites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (cookies etc) from the sites listed, although you will still be able to connect to the sites.
  
• Firefox 3 It has more features and is a lot more secure than IE. It is a very easy and painless download and install, it will no way interfere with IE, you can use them both.

Safe Surfn
Ken

[HUGHE.G]

All I can say is thank you very much for guiding me so i could make my computer saver everything is back to normal.

[ken545]

Your very welcome Hugh,

Glad we could help,

Take care,
Ken

[HUGHE.G]

Sorry about this but i just realized the virus i had renamed my computer's full description to doppleganger is there any way to change this.

[ken545]

Try right clicking on My Computer and go to Properties> Computer Name tab and under Computer Discription, you can change it there

Forgot to mention that your Operating System is out of date leaving you vunerable, open IE and go to Tools > Windows Update and install all critical updates only including Service Pack 3 and Internet Explorer 8 which is more secure than what your using

[HUGHE.G]

Okay,
I fixed the computer name. Then i tried to update through windows update but when i tell it to check for the latest updates it gives me an error saying i need to install the files required to get the updates and got another error so i checked with windows genuine advantage tool and it said my copy of windows was genuine and it said i may not have permissions to download the files is there any other way or do i need to use the admin account on the computer.

[ken545]

Hello Hughe,

We just do malware removal on this forum, why don't you post here for windows issues, they can help you get your system in shape to install those updates.
http://forums.whatthetech.com/Micros...dows_f119.html

Good Luck,

Ken

[HUGHE.G]

ha sorry about that but thanks for helping.