Need Help - Spyware Problem

[merfman]

I just finished the VundoFix scan and it never found anything, so no Log was saved.

Here's the HJT Log (most recent)

 

[Blind Dragon]

Everything looks decent except for java is still update 4 instead of update 5

Run Kaspersky Online AV Scanner

Order to use it you have to use Internet Explorer.
Go to Kaspersky and click the Accept button at the end of the page.

Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.

• Read the Requirements and limitations before you click Accept.
• Allow the ActiveX download if necessary.
• Once the database has downloaded, click Next.
• Click Scan Settings and change the "Scan using the following antivirus database" from standard to extended and then click OK.
• Click on "My Computer"
• When the scan has completed, click Save Report As...
• Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
• Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.

Attach the report into your next reply

 

[merfman]

Hey BlindDragon,

Do you have another way to download the Java update 5? becuase when i download it from the website you gave me i keep getting a "exceed maximum download" when i try to download it. Will it work if i delete the other version i have and then download it after?

I ran the kaspersky scan and the log is attacted here.

 

[merfman]

Hey BlindDragon,

Do you have another way to download the Java update 5? becuase when i download it from the website you gave me i keep getting a "exceed maximum download" when i try to download it. Will it work if i delete the other version i have and then download it after?

I ran the kaspersky scan and the log is attacted here.

I just installed Norton 360 if that makes a difference to anything. the kaspersky log is in the above post

 

[kritius]

You do not need to quote a post if it was the one directly above.

Also why did you install Norton? You were using AVG Free, AVG has the better detection rate, plus I guarantee that you system will slow down now because Norton is such a resource hog.

Did you go out and buy Norton?

 

[merfman]

You do not need to quote a post if it was the one directly above.

Also why did you install Norton? You were using AVG Free, AVG has the better detection rate, plus I guarantee that you system will slow down now because Norton is such a resource hog.

Did you go out and buy Norton?

My roommate bought it for his computer and bought it so you can use it on 2 computers, so he installed it on my computer. I've always used Norton, so i decided to continue to use it. After i get rid of all the spyware and problems, i might go out and buy the full AVG then use that.

 

[kritius]

I'll repeat myself here. You dont need to quote a post directly above your new one.

Also Norton is absolutely rubbish, if you want a paid for security suite then get AVG Pro or Kaspersky Security suite, but remember only ONE antivirus software at a time, 2 anti virus programs running does not equal twice the protection in fact it reduces it.

 

[Blind Dragon]

I completely agree, if you are going to pay for protection Kaspersky is the way to go. I would also consider NOD32 by ESET as a good pay for protection.

Delete everything in the following folder, but not the folder itself:
C:\Documents and Settings\Mat\Local Settings\Temp


Also, only use internet explorer if you absolutely have to: Here are 2 more secure browsers to choose from
1)Firefox -> http://www.mozilla.com/en-US/firefox/
2)Opera -> http://www.opera.com/

Try the Java update through one of these browsers

Uninstall Combofix
* Click START then RUN
* Now type Combofix /u in the runbox
* Make sure there's a space between Combofix and /u
* Then hit Enter.

* The above procedure will:
* Delete the following:
* ComboFix and its associated files and folders.
* Reset the clock settings.
* Hide file extensions, if required.
* Hide System/Hidden files, if required.
* Set a new, clean Restore Point.

-----------------------------------------------------------------------
Cleanup using OTMoveit2 by OldTimer
Now we can clear out the rest of the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if launched accidentally.

Download OTMoveIt2 by OldTimer OTMoveIt2.exe and place it on your desktop.

1. Double click OTMoveIt2.exe to launch it.
If using Vista Right-Click OTMoveIt and choose Run As Administrator
2. Click on the CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)

* When finished exit out of OTMoveIt2

---------------------------------------------------------------------------
I recommend you keep
1 anti virus program
1 firewall
Combo of Anti-Spyware (Spybot S&D and MBAM, or your choice)

For Spybot you can download the latest version from HERE.

keep them updated.

You can also turn on tea timer in Spybot:

• Click on Mode at the top and make sure that Advanced is checked
• Expand the Tools tab in the left pane
• Single click on the Resident Icon also in the left pane
• check Resident "TeaTimer" (Protection of over-all system settings) Active
• Close spybot

Also under Tools you can double-click System Startup in the right pane and disable programs from running at startup. This will free up system resources. For example if you don't use MSN Messenger everytime you run your computer you can disable it, then when you want to use it you can launch it through Start -> all programs, or make a shortcut on the desktop for it. That way it doesn't use resources when you aren't using it. Don't disable any entries in green though.

And just to be sure
Set correct settings for files

• Click Start > My Computer > Tools menu (at top of page) > Folder Options > View tab.
• Under "Hidden files and folders" if necessary select Do not show hidden files and folders.
• If unchecked please check Hide protected operating system files (Recommended)
• If necessary check "Display content of system folders"
• If necessary Uncheck Hide file extensions for known file types.
• Click OK

clear system restore points

• 
  This is a good time to clear your existing system restore points and establish a new clean restore point:
  • Go to Start > All Programs > Accessories > System Tools > System Restore
  • Select Create a restore point, and Ok it.
  • Next, go to Start > Run and type in cleanmgr
  • Select the More options tab
  • Choose the option to clean up system restore and OK it.
  This will remove all restore points except the new one you just created.

 

[merfman]

do you want me to get rid of everything, including HJT, CCleaner, Virtumundo?

 

[Blind Dragon]

Follow my instructions and they will remove themselves

That is what OTMoveit by OldTimer is for, the clean up function removes all those plus it removes itself

 

[merfman]

alright, i finished all the step that you listed, is my computer clean now?

 

[Blind Dragon]

Yes your logs appear clean. If you have any more issues please let me know through this thread.

Regards,

Blind Dragon

 

[merfman]

Thank-you very much for all the help.

 

[Blind Dragon]

Anytime man. If you have any more issues let me know.

Regards,

Blind Dragon

 

[merfman]

just a quick question here BlindDragon.

all my files that are on my computer have the file type after them for some reason (ex. picture.jpg) how do i get rid of the jpg part of it, so it doesn't show?

 

[Blind Dragon]

no problem,

Open windows explorer => Windows key + E => or double click my computer

-Tools -> Folder Options
- Go to View tab
- check "hide file extensions for known file types"
- Click OK to finish

 

[merfman]

thank-you again for all the help