Good job, Raynman! If you have no other issues:
------------------------------------------------------
Congratulations. Well done! Your logs appear clean. You should be good to go.
As far as those infected objects listed in the ESET log, those are safely tucked away in ComboFix's quarantine folder or in old System Restore points, which we will be taking care of now.
Go to Start >> Run and Copy/Paste the following single-line command into the Run box and click
OK
combofix /u
This will uninstall ComboFix and delete ComboFix's quarantine folder. It will also implement some cleanup procedures, remove old System Restore points which contain previous infections, and create a fresh, clean System Restore point.
Please re-enable your antivirus program and any other antispyware programs disabled earlier if you haven't already.
To enable Spybot's TeaTimer:
- Open Spybot Search & Destroy.
- In the Mode menu click "Advanced mode" if not already selected.
- Choose "Yes" at the Warning prompt.
- Expand the "Tools" menu.
- Click "Resident".
- Check the "Resident "TeaTimer" (Protection of overall system settings) active." box.
- In the File menu click "Exit" to exit Spybot Search & Destroy.
You can safely delete any tools downloaded or any logs, files, and any shortcuts on your desktop that were created during this fix.
------------------------------------------------------
MICROSOFT UPDATES
It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to
Microsoft and download all the critical updates to help prevent possible re-infection.
FIREWALL
Using a third-party Firewall will allow you to give/deny access for applications that want to go online. Select
one of these, or another of your choice:
Do not install more than one Firewall program as they will conflict with each other.SPYWARE PREVENTION
This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles:
To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:
- SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites in Internet Explorer. See tutorial here
- SpywareGuard catches and blocks spyware installation and browser hijacking in real-time. See tutorial here
- IE-Spyad is another excellent program that places over 5000 dubious websites and domains in the IE Restricted list, which will help prevent attempts to infect your system. It basically prevents any downloads from the sites listed, although you will still be able to connect to the site. See tutorial here
- MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements. It basically prevents your computer from connecting to those sites by redirecting them to 127.0.0.1, which is the IP of your local computer. See guide here and for Windows Vista here
- Spybot - Search & Destroy is an excellent spyware remover and also offers real-time protection against critical registry changes. Don't use the Immunize feature if you use SpywareBlaster. See tutorial here
Keep your antivirus program and antispyware programs updated and scan with them on a regular basis.
Please respond to this thread one more time so we can mark this thread as resolved.