Abebot removal: Can someone look at the log and help?

Any help would be appreciated. This abebot virus has been slowing down my computer.

Please follow these in order


OK. First of all only use internet explorer if you absolutely have to: Here are 2 more secure browsers to choose from
1)Firefox -> http://www.mozilla.com/en-US/firefox/
2)Opera -> http://www.opera.com/



Update your Java Runtime Environment

• First try going to Start -> Control Panel -> double click Java
• Select the Update Tab at the top of the Java console
• Click the Check for Updates button at the bottom
• If it finds the newer version (Java 6 Update 5) Follow the on screen instructions
• After it installs the newest version Go back to Control Panel -> Add/remove programs
• Uninstall any older versions of Java

If for some reason you couldn't update through the above instructions.

• Click the following link
  Java Runtime Environment 6 Update 5
• The 4th option down is the one you want (click Download)
• Check the box to agree to terms of service
• Check the box for your operating system and click 'Download selected'at the bottom
• After the install Go to Start-> Control Panel-> add/remove programs (Programs and features), and uninstall any old versions
• Navigate to C:\programfiles\Java -> delete any subfolders except the jre1.6.0_05 folder

Malwarebytes' Anti-Malware

• Please download Malwarebytes' Anti-Malware to your desktop.
  
• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to
  • Update Malwarebytes' Anti-Malware
  • and Launch Malwarebytes' Anti-Malware
• then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform full scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected.
• When completed, a log will open in Notepad. please copy and paste the log into your next reply
  • If you accidently close it, the log file is saved here and will be named like this:
  • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Download\install 'SuperAntiSpyware Home Edition Free Version' from HERE

• Launch SuperAntiSpyware and click on 'Check for updates'.
• Once the updates have been installed,exit SuperAntiSpyware.

Scan with SuperAntiSpyware

• Start SuperAntiSpyware.
• On the main screen click on 'Scan your computer'.
• Check: 'Perform Complete Scan then Click 'Next' to start the scan.
• Superantispyware will now scan your computer,when it's finished it will list all/any infections found.
• Make sure everything found has a checkmark next to it,then press 'Next'.
• Click on 'Finish' when you've done.
  
  It's possible that the program will ask you to reboot in order to delete some files.
  
  Obtain the SuperAntiSpyware log as follows:
  Click on 'Preferences'.
  Click on the 'Statistics/Logs' tab.
  Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
  It will then open in your default text editor,such as Notepad.
  Attach the notepad file here on your next reply

Combofix

• Download Combofix to your desktop.
• Double click combofix.exe & follow the prompts.
• A window will open with a warning.
• Type "1" (and Enter) to start the fix.
• When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log.

Caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Combofix is a very powerful tool so please do NOT do anything without instruction

Combofix will automatically save the log file to C:\combofix.txt


Next reply should include:
1)MBAM log
2)SAS log
3)Combofix log
4)Hijackthis log ran after everything else.

java error

i tried downloading java from both internet explorer and mozilla, but neither of them work. When gets to 'copying new files', an error sign just pops up. can you help?

Does the error say anything specific?

java error

It says "Error 1606. Could not access network location
h ttp://javadll.sun.com/webapps/download/GetFile/1.6.0_05-b13/windowsi586/jo160000.cab.

java error

It says "Error 1606. Could not access network location
h ttp://javadll.sun.com/webapps/download/GetFile/1.6.0_05-b13/windowsi586/jo160000.cab.

Try this

1)Go to Start, Run, type regedit, click ok

2)Navigate to HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurentVersion \ Explorer \ User Shell Folders

3)look in the right pane for Recent -> right click it and select delete

4) restart computer and try again

it still doesn't work.

i have also been getting this popup

Microsoft Visual C++ Runtime Library

Buffer overrun detected!
Program: C:\WINDOWS\explorer.exe
A buffer overrun has been detected which has corrupted the program's internal state. The program cannot safely continue...

Yay! Java's working!

Ok, continue on with the instructions. However, for future reference what got it working again.

sorry... i'm trying to upload my mbam log but when i get to my user... i can't find the application data folder...

oh and to answer your question... i went i tried using the offline version of java.

Open windows explorer (double click my computer or hold windows key on keyboard and press E)

Tool -> folder options-> view tab:

Check "Show hidden files and folders"
Uncheck "Hide protected operating system files"

Then come back here and try to attach the log

I know this is a dumb question, but where is Preferences?

A lot of programs have Preferences in them, what are you trying to do?

i'm trying to upload the sas log

Once you open the log save it to your desktop so it will be easy to find




After the above you will see this screen click on the Statistics/Logs tab then double click the log to open

here you go...

This should get most of it, the rest should be able to be cleared up through Hijackthis.

CFScript

Open notepad and copy/paste the text in the code box below into it:
NOTE* make sure to only highlight and copy what is inside the quote box nothing out side of it.
Also ..

Pay particular attention to this :-

Make sure the word File:: is on the first line of the text file you save (no blank line above it, & no space in front of it)

Save this as CFScript.txt

Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below.



This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a fresh HJT log.

Thanks! Is the virus completely gone now.