Bobbye
Posts: 16,313 +36
Okay, the scans look good. No new entries in Malwarebytes. And all Eset entries are in either the Qoobox where Combofix sends the quarantined files or in OTM. They are no longer active in the system and will be removed when you uninstall Combofix and OTM.
=================================================
A lot of entries have been removed. I would still recommend the reformat/reinstall. The security wasn't doing a lot of good if you got so much malware in the few months. Please keep in mind that with the Backdoor.bot, the system may have been compromised and your information may have been stolen. This includes passwords, financial information and personal information
================================================
If the redirects have stopped:
Remove all of the tools we used and the files and folders they created
This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
Images courtesy lytebyte.
Empty the Recycle Bin
=================================================
A lot of entries have been removed. I would still recommend the reformat/reinstall. The security wasn't doing a lot of good if you got so much malware in the few months. Please keep in mind that with the Backdoor.bot, the system may have been compromised and your information may have been stolen. This includes passwords, financial information and personal information
================================================
If the redirects have stopped:
Remove all of the tools we used and the files and folders they created
- Uninstall ComboFix and all Backups of the files it deleted
[o] Click START> then RUN
[o] Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
- Download OTCleanIt by OldTimer and save it to your Desktop.
[o] Double click OTCleanIt.exe.
[o] Click the CleanUp! button.
[o] If you are prompted to Reboot during the cleanup, select Yes.
[o]The tool will delete itself once it finishes.
Note: If you receive a warning from your firewall or other security programs regarding OTC attempting to contact the internet, please allow it to do so.
Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
- Set a new, clean Restore Point
[o] Click on Start> right click on Computer> Properties
[o] Select System Protection
[o] Click on the Create button (near bottom)
[o] Type a name for the Restore Point
[o] Click on Create again to save the restore point.
- Deleting all but the most recent System Protection point in Windows 7
[o] Click Start> Computer> right click the C Drive and choose Properties> enter.
[o] Click Disk Cleanup from there.
[o] Click Clean up system files
This restarts Disk Cleanup to run in elevated mode.
[o] Click the More Options tab
[o] Click the Clean up under System Restore and Shadow Copies.
[o] Click OK.
[o] You will get a confirmation screen> Just click Delete.
[o] Click OK on the Disk Cleanup Screen.
[o] Click Delete Files on the Confirmation screen.
This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
Images courtesy lytebyte.
Empty the Recycle Bin
