1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Malware Problem, Google Toolbar Redirect, Etc.

Discussion in 'Malware and Virus Removal Archive' started by sheltone, 2010/06/05.

Page 3 of 3
  1. 2010/06/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    When I'm done with reviewing HJT log, you can uninstall it.
     
    broni,
    #41
  2. 2010/06/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Re-run HJT and checkmark:

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)

    Click "Fix checked" button.

    When done...


    Your computer is clean :)

    1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point.

    Turn off System Restore:

    - Windows XP:
    1. Click Start.
    2. Right-click the My Computer icon, and then click Properties.
    3. Click the System Restore tab.
    4. Check "Turn off System Restore ".
    5. Click Apply.
    6. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
    7. Click OK.
    - Windows Vista and 7:
    1. Click Start.
    2. Right-click the Computer icon, and then click Properties.
    3. Click on System Protection under the Tasks column on the left side
    4. Click on Continue on the "User Account Control" window that pops up
    5. Under the System Protection tab, find Available Disks
    6. Uncheck the box for any drive you wish to disable system restore on (in most cases, drive "C: ")
    7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this.
    8. Click OK

    2. Restart computer.

    3. Turn System Restore on.

    4. Make sure, Windows Updates are current.

    [SIZE= "4"]5. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately![/SIZE]

    6. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

    7. Run defrag at your convenience.

    8. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

    9. Please, let me know, how is your computer doing.
     
    broni,
    #42


  3. to hide this advert.

  4. 2010/06/08
    sheltone

    sheltone Inactive Thread Starter

    Joined:
    2004/03/28
    Messages:
    45
    Likes Received:
    0
    You got it! Do I do it from Add / Remove Items or do you have some other easy magic way for me to do it? ;)
     
    sheltone,
    #43
  5. 2010/06/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Do what? :)
     
    broni,
    #44
  6. 2010/06/08
    sheltone

    sheltone Inactive Thread Starter

    Joined:
    2004/03/28
    Messages:
    45
    Likes Received:
    0
    Remove HijackThis
     
    sheltone,
    #45
  7. 2010/06/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Oh....yes...LOL
     
    broni,
    #46
  8. 2010/06/08
    sheltone

    sheltone Inactive Thread Starter

    Joined:
    2004/03/28
    Messages:
    45
    Likes Received:
    0
    Okay, mission completed. Re-ran HJT and deleted file as instructed. Turned off System Restore, rebooted and turned it back on.

    Question, based on what was wrong, do I need to change all my passwords? I probably can't get to it until tomorrow, is that okay?

    Computer seems fine so far, but its only been clean for what, 30 minutes? ;)

    We'll see how it is tomorrow and thanks!

    Larry




     
    sheltone,
    #47
  9. 2010/06/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I'm glad to hear good news :)
    You had a rootkit, so sensitive passwords change is certainly due.

    Good luck and stay safe :)
     
    broni,
    #48
  10. 2010/06/08
    sheltone

    sheltone Inactive Thread Starter

    Joined:
    2004/03/28
    Messages:
    45
    Likes Received:
    0
    Thank you again. I had another issue that I thought could be malware related BUT it hasn't happened for the past few days and I suspect cleaning out the computer system has fixed it. If not, I'll bother you again. ;)

    This is an invaluable service you're offering here. I appreciate all your efforts!

    Larry
     
    sheltone,
    #49
  11. 2010/06/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're very welcome :)
     
    broni,
    #50
Page 3 of 3

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...