Infected with Antivirus Master and others - Page 2

Ried · 09-08-2008, 12:36 PM

Hi Faith,

We'll go ahead and uninstall Symantec, but before we do, download the installer for this very good free Anti Virus.

Avira AntiVir PersonalEdition Classic. Do NOT install it yet. It's never a good idea to have more than 1 Anti Virus product installed at one time as it will cause system slow downs and possibly other errors.

Next....

Uninstall the following via the Add/Remove Panel (Start->->Control Panel->Add/Remove Programs)

Symantec AntiVirus
LiveUpdate 2.6

--------------------------------------------------------------------

If you have difficulty uninstalling Symantec, please go to this site and follow the instructions for downloading and running Symantec Removal Tool.

--------------------------------------------------------------------

After Symantec has been uninstalled and you're rebooted your machine....

Double click on the .exe for the Avira to install it, and update it's definitions.

------------------------------

Please let me know how that worked out for you.

Faith · 09-09-2008, 01:51 AM

Hi Reid,

Symantec has been removed and Avira is now installed. I haven't had any pop-ups on reboot, so all is looking good. Many thanks for all your help, it's been very much appreciated.

Faith

Ried · 09-09-2008, 06:47 AM

That's great to hear.

Your logs are clean. If there aren't any more problems, please continue with these final instructions and helpful links:

The following procedure will clear out the backups and quarantines created by the fix. It will also reset your System Restore by flushing out previous restore points (which contain the infections) and create a new restore point.

Click Start > Run and copy/paste, or type the following bolded text into the Run box and click OK:

ComboFix /u

--------------------------------------------------------------------

To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:

McAfee Site Advisor--free version. The folks there check out websites and based on their findings, rate it as Safe, Unknown, Caution, or Bad.

SpywareBlaster 4.0 to help prevent spyware from installing in the first place. Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items.

It will block any bad ActiveX from running in Internet Explorer and Firefox if it's listed in their database (which you should update frequently). To view their database and list of restricted sites, launch the program and click on each of the tabs on the main display page.

IESpyAD Zoned Out to block access to malicious websites so you cannot be redirected to them from an infected site or email. This severely impairs attempts to infect your system as it basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites.

Update, and scan with your onboard Anti Malware and Anti Virus programs regularly. Without regular updates you will not be protected when new malicious programs are released.

In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:

PC Safety and Security--What Do I Need?
Think Prevention

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

-----------------------------------------------------

Follow the list above and the potential for infection will reduce dramatically.

**Kindly respond one more time and let me know if we may consider this thread resolved.

09-08-2008, 12:36 PM	#21 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,562 OS: WinXP and Vista	Re: Infected with Antivirus Master and others Hi Faith, We'll go ahead and uninstall Symantec, but before we do, download the installer for this very good free Anti Virus. Avira AntiVir PersonalEdition Classic. Do NOT install it yet. It's never a good idea to have more than 1 Anti Virus product installed at one time as it will cause system slow downs and possibly other errors. Next.... Uninstall the following via the Add/Remove Panel (Start->->Control Panel->Add/Remove Programs) Symantec AntiVirus LiveUpdate 2.6 -------------------------------------------------------------------- If you have difficulty uninstalling Symantec, please go to this site and follow the instructions for downloading and running Symantec Removal Tool. -------------------------------------------------------------------- After Symantec has been uninstalled and you're rebooted your machine.... Double click on the .exe for the Avira to install it, and update it's definitions. ------------------------------ Please let me know how that worked out for you. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul." Last edited by Ried; 09-08-2008 at 12:38 PM.

09-09-2008, 01:51 AM	#22 (permalink)
Faith Registered User Join Date: Nov 2004 Location: England Posts: 147 OS: XP	Re: Infected with Antivirus Master and others Hi Reid, Symantec has been removed and Avira is now installed. I haven't had any pop-ups on reboot, so all is looking good. Many thanks for all your help, it's been very much appreciated. Faith

09-09-2008, 06:47 AM	#23 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,562 OS: WinXP and Vista	Re: Infected with Antivirus Master and others That's great to hear. Your logs are clean. If there aren't any more problems, please continue with these final instructions and helpful links: The following procedure will clear out the backups and quarantines created by the fix. It will also reset your System Restore by flushing out previous restore points (which contain the infections) and create a new restore point. Click Start > Run and copy/paste, or type the following bolded text into the Run box and click OK: ComboFix /u -------------------------------------------------------------------- To help protect your computer in the future I recommend that you get the following free programs if you do not already have them: McAfee Site Advisor--free version. The folks there check out websites and based on their findings, rate it as Safe, Unknown, Caution, or Bad. SpywareBlaster 4.0 to help prevent spyware from installing in the first place. Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items. It will block any bad ActiveX from running in Internet Explorer and Firefox if it's listed in their database (which you should update frequently). To view their database and list of restricted sites, launch the program and click on each of the tabs on the main display page. IESpyAD Zoned Out to block access to malicious websites so you cannot be redirected to them from an infected site or email. This severely impairs attempts to infect your system as it basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. Update, and scan with your onboard Anti Malware and Anti Virus programs regularly. Without regular updates you will not be protected when new malicious programs are released. In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles: PC Safety and Security--What Do I Need? Think Prevention Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them. ----------------------------------------------------- Follow the list above and the potential for infection will reduce dramatically. Kindly respond one more time and let me know if we may consider this thread resolved. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."