Antivir / fraud.sysguard

Status
Not open for further replies.
Hello RobinsonCano

holy toledo at the list of things in that last post
i will get to them one by one and give you an update.
Click to expand...
Please be aware that these are only general suggestions. You may not need all (or any) of the things listed - it is just for extra information.

Please make sure that you only have ONE antivirus and ONE firewall running on your system.


teatimer back on?
Click to expand...
I tend to use Spybot as an on-demand scanner and have TeaTimer switched off. However, as a test, you could always switch it on and see how it works out. You'll know soon enough if you have to disable it :cool:


check back tomorrow
Click to expand...
:bigthumb:
 
Hello RobinsonCano


The message you are receiving may be related to the IBM client access program you had on your machine. I did a little looking on Google and it sounds as though you may need to delete the CWBMSGBX.DLL file from your system.

More information about the message you are receiving can be found here:

http://www.techsupportforum.com/microsoft-support/win-98-me-support/56752-no-windows.html

http://social.answers.microsoft.com...e/thread/b957bb6d-a440-4bd0-a459-f5a561454ab2


Note that this message does not appear to be malware related so it is really up to you if you want to follow through and remove the file.

If you chose to remove it, here is some information:


  • Right-click your "Start" button and select "Search".
  • Under "All or Part of the Filename:", type "CWBMSGBX.DLL" (without the quotation marks).
  • Under "Look in", select "Local Hard Drives (C: )" and the click on "Search".
  • Once the search is complete, Delete the file that is found.


As you system appears to be clean, I will have to hand you over to some trusted Tech Forums for further assistance should you need it:

http://forums.whatthetech.com/index.php?showforum=119

http://www.techsupportforum.com/microsoft-support/windows-xp-support/

Hope this helps :)
 
an update! and a few simple questions.

1. OTL is done. It did the self delete and rebooted my machine. :bigthumb:

2. Security Check and McAfee Removal Tool were not found under add / remove programs. So I just deleted the .exe files from the my desktop. Is this correct?

3. I never use IE. I'm a firefox person. But I'm trying to update it anyways. It just keeps saying its downloading... :/ I'll figure it out or wait it out.

4. Service Pack 3 installed. Took forever, but it worked. :bigthumb:

5. Thanks for all the suggestions, links, and info. They are being read. No script sounds like a winner to me.

questions.

1. What about ERUNT and Gmer? Can i get rid of them?

2. The malware found on my machine. How dangerous were they? Should I be worried? i.e. Passwords or worse.

3. At one point I plugged an external HD into this machine. Thoughts or concerns?

4. How do I thank you?
 
JonTom said:
Hello RobinsonCano


The message you are receiving may be related to the IBM client access program you had on your machine. I did a little looking on Google and it sounds as though you may need to delete the CWBMSGBX.DLL file from your system.

More information about the message you are receiving can be found here:

http://www.techsupportforum.com/microsoft-support/win-98-me-support/56752-no-windows.html

http://social.answers.microsoft.com...e/thread/b957bb6d-a440-4bd0-a459-f5a561454ab2


Note that this message does not appear to be malware related so it is really up to you if you want to follow through and remove the file.

If you chose to remove it, here is some information:


  • Right-click your "Start" button and select "Search".
  • Under "All or Part of the Filename:", type "CWBMSGBX.DLL" (without the quotation marks).
  • Under "Look in", select "Local Hard Drives (C: )" and the click on "Search".
  • Once the search is complete, Delete the file that is found.


As you system appears to be clean, I will have to hand you over to some trusted Tech Forums for further assistance should you need it:

http://forums.whatthetech.com/index.php?showforum=119

http://www.techsupportforum.com/microsoft-support/windows-xp-support/

Hope this helps :)
Click to expand...

worked like a charm :bigthumb:
 
Hello RobinsonCano

So I just deleted the .exe files from the my desktop. Is this correct?
Click to expand...
Thats right. You do not need to uninstall them, deleting them from the desktop is all that is required.


What about ERUNT and Gmer? Can i get rid of them?
Click to expand...
GMER should have been removed automatically when you removed OTL. If not, delete it from your desktop. ERUNT is a great tool. If it were me I would keep it.


How dangerous were they? Should I be worried?
Click to expand...
Difficult to answer. It is always a good idea to change your passwords regularly, and since you have had some nasties on your system changing them now would be wise.


At one point I plugged an external HD into this machine. Thoughts or concerns?
Click to expand...
Plug it in and scan it with your resident AV. You may also be abe to scan it with MBAM by selecting the external drive from the list of scan options that appear after you select "Full Scan".


worked like a charm
Click to expand...
Phew!


How do I thank you?
Click to expand...
You already have :)

Best wishes
JonTom
 
JonTom said:
Difficult to answer. It is always a good idea to change your passwords regularly, and since you have had some nasties on your system changing them now would be wise.
Click to expand...

will work on that thanks.


JonTom said:
Plug it in and scan it with your resident AV. You may also be abe to scan it with MBAM by selecting the external drive from the list of scan options that appear after you select "Full Scan".
Click to expand...

and ill give that a whirl when i get home. thanks.
 
Since this problem appears to be resolved this topic is now closed.

Glad we could help :)

If you are the topic starter and need this topic reopened, please PM a staff member (include the address of this thread in your request).

Everyone else please start a new topic.


Best wishes
JonTom
 
Status
Not open for further replies.
Back
Top