XP Malware Infection

[roger.f]

after above. I went to the windows update site. It found 20 other updates (all office related). I did not install them, but the auto updated picked them up. I shut the system down and it tried to install 21 updates. It appeared that all went ok, but the one still did not install. See status below. First one failed other were successful

Windows XP Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2742597) Monday, March 25, 2013 Microsoft Update
Office 2002/XP Security Update for Microsoft Word 2002 (KB2328360) Monday, March 25, 2013 Microsoft Update
Office 2002/XP Security Update for Microsoft Office XP (KB976380) Monday, March 25, 2013 Microsoft Update
Office 2002/XP Security Update for Access Snapshot Viewer 2002 (KB955440) Monday, March 25, 2013 Microsoft Update
Office 2002/XP Security Update for Microsoft Excel 2002 (KB2541003) Monday, March 25, 2013 Automatic Updates
Office 2002/XP Security Update for Microsoft Office XP (KB957646) Monday, March 25, 2013 Automatic Updates
Office 2002/XP Security Update for Microsoft Office 2002 (KB956464) Monday, March 25, 2013 Automatic Updates
Office 2002/XP Security Update for PowerPoint 2002 (KB905758) Monday, March 25, 2013 Automatic Updates
Office 2002/XP Security Update for Microsoft Office XP (KB2288608) Monday, March 25, 2013 Automatic Updates
Office 2002/XP Security Update for Microsoft Office XP (KB975008) Monday, March 25, 2013 Automatic Updates

[Blade81]

Hi,

Download and run this update. After that, run the previous one.

[roger.f]

update successfully installed.
Thanks, Roger

[Blade81]

Good! Are you still noticing any problems? If not, it's time to secure your system to prevent against further intrusions


THESE STEPS ARE VERY IMPORTANT

Let's reset system restore
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: You will lose all previous restore points which are likely to be infected. Please note you need Administrator Access to do clean the restore points.

1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

2. Reboot.

3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
NOTE: only do this ONCE,NOT on a regular basis


Now lets uninstall ComboFix:

• Click START then RUN
• Now copy-paste Combofix /uninstall in the runbox and click OK

UPDATING WINDOWS AND INTERNET EXPLORER

IMPORTANT: You Need to Update Windows and Internet Explorer to protect your computer from the malware that is around on the Internet. Please go to the windows update site to get the critical updates.


Download and run Secunia Personal Software Inspector (PSI) and fix its findings. Leave the program installed so you'll stay alarmed about vulnerable components in future too.


Just a final reminder for you. I am trying to stress these two points.
UPDATE UPDATE UPDATE!!! Make sure you do this about every 1-2 weeks.
Make sure all of your security programs are up to date.
Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.


Once again, please post and tell me how things are going with your system... problems etc.

Have a great day,
Blade

[roger.f]

I think we still have some bad stuff to remove. Back in response #9 you said

"ESET findings will be removed as the final step a bit later."

Then we paused to solve the issue with auto update. So do you want me to secure the system now, or do we want to take care of the bad stuff found by ESET first?

Thank you so much.... Roger

[Blade81]

Hi,

Yes, those ESET findings should be gone after system restore has been reset and ComboFix uninstalled

[roger.f]

Everything working great! Thank you!

How can I learn to remove viruses and malware manually?

Regards,
Roger

[Blade81]

You're welcome

How can I learn to remove viruses and malware manually?

There're training schools that teach fighting against malware. Please have a look here.