Rootkit.0access infection

[jeff1955]

Hi Ken,

Sorry about the delay but it got late here in the UK!

ESETScan;

D:\Downloads\PCVC\SoftonicDownloader80984.exe a variant of Win32/SoftonicDownloader.A application


Short but significant?

Jeff

[ken545]

Hello Jeff,

This maybe a false postive but to be on the safeside I would delete it

D:\Downloads\PCVC\SoftonicDownloader80984.exe

Hows everything running now ?

[jeff1955]

Hey Ken,

Everything seems to be running really well now.

I have deleted the Softonic exe file as you advised.

Jeff

[ken545]

Wonderful, glad things are back to normal for you I think your good to go


We need to update your Java to keep you more secure

1. Go to your Control Panel and click on the Java Icon ( looks like a little coffee cup ) click on About and you should have Version 7 Update 7, if not proceed with the instructions.
   
2. Go to the update Tab and update it
   
3. Then go to your Add Remove Programs (WIN XP) or Programs and Features (Vista / Win 7) in the Control Panel and uninstall all previous versions.

You can verify the installation Here

• Click START then RUN
• Now type Combofix /uninstall in the runbox and click OK. Note the space between the X and the /, it needs to be there.
  
  
  

Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups, any programs that where not removed you can just drag to the trash.


Malwarebytes is the free version and yours to keep and will not be removed

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Safe Surfn
Ken

[jeff1955]

Can't thank you enough Ken, everything working fine.

Just a couple of things;

I verified my Java from the link you sent and got a big tick, latest version installed.

However, there is no Java icon in my Control Panel. I looked in Programs and Features and found;

Java7 Update7
Java(TM) 6 Update 31
JavaFX 2.1.1

I get Java update reminders every so often and always allow the update.

My SystemStartUp contains;

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
file: C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
size: 252848
MD5: 12916E0642E92561C98B18A2A2D01B14

Anyway - huge thanks again for your help Ken.

Jeff

[ken545]

Jeff,

You can uninstall this in Programs and Features
Java(TM) 6 Update 31


Take care,

Ken

[jeff1955]

Thanks again Ken, great service from you guys as usual.

Jeff

[ken545]

My pleasure,

Ken

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad I could help.