Help! Interference with Antivirus, Spybot, HJT

[mandypie4]

Hey Ken,
Glad to be rid of that nasty malware!! Thank you so much!!

Unfortunately, I wasn't able to run ESET. Apparently every scan is determined to give me trouble, lol. I tried it 4 different times but it stopped each time. At different spots. I made sure I didn't touch anything on the computer while it was running and I also set the computer not to go idle so that I could always see the scan running. Twice it froze so that I couldn't close it down. I was thinking of trying it in Safe Mode next to see if it would run all the way through there, but I wasn't sure if I should.

Also, I definitely will get rid of Symantec. I've heard it's difficult to get rid of completely; hopefully it's not.

[ken545]

Good Morning Mandy,

Go to Programs and Features in the Control Panel and uninstall Norton if thats the one you want to get rid of. Then you can run there removal tool for any leftovers.
http://service1.symantec.com/SUPPORT...05033108162039


You can take all the tools we used at the beginning thats still on your desktop like Win32kdiag, RootRepleal, exehelper and drag them to the recycle bin.

Your Java appears to be up to date so you can uninstall any previous versions as well through Programs and Features, these two should be uninstalled
Java(TM) 6 Update 7
Java(TM) SE Runtime Environment 6



TFC <--Yours to keep, run it about once aweek to clean out the clutter.

Malwarebytes <-- Yours to keep also, check for updates and run a scan now and then.

Combofix <---Is not a general cleaning tool, just run it with supervision or you can bork your system

• Click START then RUN
• Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  
  
  
  • 
  
  
  
• When shown the disclaimer, Select "2"

The above procedure will:

• Delete the following:
  • ComboFix and its associated files and folders.
  • VundoFix backups, if present
  • The C:\Deckard folder, if present
  • The C:_OtMoveIt folder, if present
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Reset System Restore.

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Keep in mind if you install some of these programs. Only ONE Anti Virus and only ONE Firewall is recommended, more is overkill and can cause you problems. You can install all the Spyware programs I have listed without any problems. If you install Spyware Blaster and Spyware Guard, they will conflict with the TeaTimer in Spybot , you can still install Spybot Search and Destroy but do not enable the TeaTimer .

Here are some free programs to install, all free and highly regarded by the fine people in the Malware Removal Community

• Spybot Search and Destroy 1.6
  Check for Updates/ Immunize and run a Full System Scan on a regular basis. If you install Spyware Blaster ( Recommended ) then do not enable the TeaTimer in Spybot Search and Destroy.
  
• Spyware Blaster It will prevent most spyware from ever being installed. No scan to run, just update about once a week and enable all protection.
  
• Spyware Guard It offers realtime protection from spyware installation attempts, again, no scan to run, just install it and let it do its thing.
  
• IE-Spyad
  IE-Spyad places over 6000 web sites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (cookies etc) from the sites listed, although you will still be able to connect to the sites.
  
• Firefox 3 It has more features and is a lot more secure than IE. It is a very easy and painless download and install, it will no way interfere with IE, you can use them both.

Safe Surfn
Ken

[mandypie4]

Thank you so much for your help, your time, and your patience, Ken!! I really appreciate it!!

I just have one more thing that happened: Combofix won't uninstall the way it's supposed to. I tried the run command given. I even tried changing it to Combo-Fix /u because we renamed it to that. But every time it comes up as "Windows cannot find 'ComboFix'. Make sure you typed the name correctly, and then try again." (or "Windows cannot find 'Combo-Fix'." if that's what I tried)

I made sure that the exe file is saved on the Desktop like it's supposed to be. I also made sure to include the space between the x and /

I'm at a loss. I don't know if this would also be related to getting the blue screen while ComboFix was running (processing the logs)? But I know it's important to uninstall it and I can't figure out what's going wrong. Sorry about this.

[ken545]

Hi Mandy,

Now to remove most of the tools that we have used in fixing your machine:

• Make sure you have an Internet Connection.
• Download OTC to your desktop and run it
• A list of tool components used in the cleanup of malware will be downloaded.
• If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
• Click Yes to begin the cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the cleanup process. If you are asked to reboot the machine choose Yes.

Glad things are running normal for you again

Take care,
Ken

[mandypie4]

Yay!! Glad it's a simple fix to delete it.

Again, thank you!! You are an absolute godsend!!

[ken545]

Your more than welcome Mandy.

Ken

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad I could help.