TechSpot

Did the 8 steps. Help appreciated

By MikeBillsFan
Jun 9, 2009
  1. Hi. I've been dealing with the _helper.dll virus that shows up in the /Common/ folder open everytime I start up Windows XP. Thought I got rid of it a week ago with Kaspersky free trial but it came back soon after. Now I've found and completed your 8 steps. Logs are attached as requested plus the Kaspersky, which I ran full scan again for my Step 1 (since I had it installed). Thanks for the help.

    Mike
     
  2. touch

    touch TS Rookie Posts: 978

    Hello

    Download and unzip to own folder on Desktop - http://bellsouthpwp.net/p/r/prprogramsstudios/viewpointkiller.zip
    Run ViewpointKiller.exe

    Reboot.

    Please download combofix here ->
    ComboFix

    Open notepad and copy/paste the text in the quotebox below into it:
    Name the file as CFScript
    and Save it on the desktop

    http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif

    Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.

    Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall
     
  3. MikeBillsFan

    MikeBillsFan TS Rookie Topic Starter

    Thanks very much, touch! I ran those steps and attached is the combofix log.
     
  4. touch

    touch TS Rookie Posts: 978

    It looks clean. How are things running now ?
     
  5. MikeBillsFan

    MikeBillsFan TS Rookie Topic Starter

    Seems good. I had a similar feeling after running Kaspersky the first time where it appeared to clean the virus but it came back. Hopefully it is gone for good now.

    Thanks very much for you time!
     
  6. touch

    touch TS Rookie Posts: 978

    It should be gone for good now :)

    Now your computer problems are solved, it is time for the clean-up procedure
    You should Create a New Restore Point to prevent possible reinfection from an old one.
    The easiest and safest way to do this is:
    Go to Start > All Programs > Accessories > System Tools > System Restore
    Select Create a restore point, and Ok it.
    Next, go to Start > Run and type in cleanmgr
    Select the More options tab
    Choose the option to clean up system restore and OK it.

    This will remove all restore points except the new one you just created.

    Please download OTCleanIt.
    Save it to desktop.
    This will remove all the tools we used to clean your computer.
    Double-click OTCleanIt.exe. Click CleanUp. Say Yes to the "Begin cleanup Process?"
    When asked if you want to proceed with the cleanup process, click Yes. Restart your computer when prompted.
    Please note. It will NOT remove Mbam, Ccleaner and SuperAntispyware.

    To learn more about how to protect yourself while on the internet, please read Tony KleinĀ“s guide:How did I get infected in the first place?

    Keep safe :wave:
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...