Pops ups, slowness, and the usual suspects

[forhockey]

Hi xtopherp,

Sorry for the delay, as I've been out of the city for a few days. Glad to hear everything is running smoothly...

There are just a few more things to clean up.


Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)

R3 - URLSearchHook: (no name) - {7c5c0f58-e061-457d-9033-77307f5ed00c} - (no file)
O3 - Toolbar: (no name) - {7c5c0f58-e061-457d-9033-77307f5ed00c} - (no file)

Please remember to close all other windows, including browsers then click Fix checked.

--------------------------------------------------------------

Well done, your logs are clean! There are just a few more things I would like you to do.


The following procedure will clear out ComboFix.exe, as well as the backups and quarantines created by the fix. It will also reset your System Restore by flushing out previous restore points (which contain the infections) and create a new restore point.

Click Start > Run and copy/paste, or type the following bolded text into the Run box and click OK:

ComboFix /u

----------------------------------------------------------------

Microsoft Updates

It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to Microsoft and download all the critical updates to help prevent possible re-infection.

Malware Prevention Tools

These programs configure your computer to prevent known malware-related changes. You can have more than one of these at a time and they take up minimal resources.

• SpywareBlaster - Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items. Check regularly for updates.
• IE-Spyad - Here is an installation guide -> http://www.techsupportforum.com/cont...ticles/63.html
• MVPS Hosts File - extract and double-click the mvps.bat file. This will replace your current HOSTS file with one that will restrict known ad sites form serving you unsolicited advertisements, preventing your computer from connecting to those sites.
• McAfee SiteAdvisor - helps to warn you before you interact with a dangerous Web site. Works with both IE and Firefox.
• SpywareGuard - real-time protection that detects and blocks spyware before it can execute.

Alternative Web Browsers

Using an alternative browser can help prevent malware from being installed without your knowledge, but may not work on all websites.

• Firefox
• Opera

Firewalls

If you do not have a firewall, here are a few free ones available for personal use:

Understanding and Using Firewalls

• Comodo Firewall Pro
• ZoneAlarm
• OutPost Firewall

Informational Reading

In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles:

• PC SAFETY AND SECURITY
• How Did I Get Infected In The First Place?.
• THE ANTI-SPYWARE TUTORIAL
• STRONG PASSWORDS

Please respond to this thread one more time so we can mark this thread as resolved.

[xtopherp]

Hi. A couple of things:
1. Took care of the Hijack this items
2. When I tried to use the combofix / u function, I recieved a pop-up stating that my Combofix had expired, and the desktop icon disappeared. I thought I would go back and re-download it but get the error "Cannot Rename Combofix as Combofix [1]. Please Use Another Name".

I get the feeling I should be able to figure this one out, but cannot see anywhere that gives me the option of renaming anything.
Thanks again.

[forhockey]

Hi. Please delete all copies of ComboFix.exe from your desktop, so that there are no traces of the old program. Next, download ComboFix from the following link and there will be no need to rename anything. Then try using the combofix /u switch.

BleepingComputer.com

Thanks

[xtopherp]

Sorry for the delay. My issue above was actually as a result of my forgetting to turn off my antivirus software while I re-downloaded Combofix. Uninstall went fine. Happy to supply any logs or further info if you feel they need to be looked at. Otherwise, operating well and you can mark this issue as resolved.

Again, thank you very much for your help.

[forhockey]

You're welcome. Safe surfing!