Slow, Window Explorer using lots of memory - Virtumondo 2 trojans - Page 2

**chemist** · 08-11-2008, 08:41 AM

ComboFix did uninstall, right? Please let me know.

Not sure why it didn't flush out old Restore Points. We can do it manually:

We need to disable, then enable your System Restore to flush out potentially infected System Restore Points and leave you with one fresh Restore Point.

To turn off Windows Vista System Restore:

1. Click Start.
2. Right-click the Computer icon, and then click Properties.
3. Click on System Protection under the Tasks column on the left side
4. Click on Continue on the "User Account Control" window that pops up
5. Under the System Protection tab, find Available Disks
6. Uncheck the box for your C: drive to disable system restore
7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this.
8. Click OK
9. When you have finished, restart the computer and follow the instructions in the next section to turn on System Restore.

To turn on Windows Vista System Restore:

1. Click Start.
2. Right-click the Computer icon, and then click Properties.
3. Click on System Protection under the Tasks column on the left side
4. Click on Continue on the "User Account Control" window that pops up
5. Under the System Protection tab, find Available Disks
6. Place a checkmark in the box for your C: drive to enable system restore
7. Click OK

------------------------------------------------------

Please also check to see if your system files are hidden. If they are not hidden, please do the following:

Go to Start > (Settings) > Control Panel > Folder Options > View tab and uncheck Show hidden files and folders. Check the Hide protected operating system files (recommended) option. Also make sure there is a checkmark beside Hide file extensions for known file types. Click OK.

Let me know if you were successful.

**chemist** · 08-15-2008, 07:56 PM

Still with us? Any trouble with those last instructions?

TrojanVictim666 · 08-15-2008, 10:51 PM

Sorry about that, i successfully removed all old restore points and created a new one. Everything is in fine working condition. Thanks again.

**chemist** · 08-15-2008, 11:21 PM

You're very welcome!

08-11-2008, 08:41 AM	#21 (permalink)
chemist Moderator, Analyst, Security Team; Rangemaster, TSF Academy Join Date: Oct 2007 Location: Georgia Posts: 10,475 OS: XP SP3	Re: Slow, Window Explorer using lots of memory - Virtumondo 2 trojans ComboFix did uninstall, right? Please let me know. Not sure why it didn't flush out old Restore Points. We can do it manually: We need to disable, then enable your System Restore to flush out potentially infected System Restore Points and leave you with one fresh Restore Point. To turn off Windows Vista System Restore: 1. Click Start. 2. Right-click the Computer icon, and then click Properties. 3. Click on System Protection under the Tasks column on the left side 4. Click on Continue on the "User Account Control" window that pops up 5. Under the System Protection tab, find Available Disks 6. Uncheck the box for your C: drive to disable system restore 7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this. 8. Click OK 9. When you have finished, restart the computer and follow the instructions in the next section to turn on System Restore. To turn on Windows Vista System Restore: 1. Click Start. 2. Right-click the Computer icon, and then click Properties. 3. Click on System Protection under the Tasks column on the left side 4. Click on Continue on the "User Account Control" window that pops up 5. Under the System Protection tab, find Available Disks 6. Place a checkmark in the box for your C: drive to enable system restore 7. Click OK ------------------------------------------------------ Please also check to see if your system files are hidden. If they are not hidden, please do the following: Go to Start > (Settings) > Control Panel > Folder Options > View tab and uncheck Show hidden files and folders. Check the Hide protected operating system files (recommended) option. Also make sure there is a checkmark beside Hide file extensions for known file types. Click OK. Let me know if you were successful. __________________ Our help is free but please donate Proud member of ASAP Proud member of UNITE

08-15-2008, 07:56 PM	#22 (permalink)
chemist Moderator, Analyst, Security Team; Rangemaster, TSF Academy Join Date: Oct 2007 Location: Georgia Posts: 10,475 OS: XP SP3	Re: Slow, Window Explorer using lots of memory - Virtumondo 2 trojans Still with us? Any trouble with those last instructions? __________________ Our help is free but please donate Proud member of ASAP Proud member of UNITE

08-15-2008, 10:51 PM	#23 (permalink)
TrojanVictim666 Registered User Join Date: Aug 2008 Posts: 12 OS: Vista SP1	Re: Slow, Window Explorer using lots of memory - Virtumondo 2 trojans Sorry about that, i successfully removed all old restore points and created a new one. Everything is in fine working condition. Thanks again.

08-15-2008, 11:21 PM	#24 (permalink)
chemist Moderator, Analyst, Security Team; Rangemaster, TSF Academy Join Date: Oct 2007 Location: Georgia Posts: 10,475 OS: XP SP3	Re: Slow, Window Explorer using lots of memory - Virtumondo 2 trojans You're very welcome! __________________ Our help is free but please donate Proud member of ASAP Proud member of UNITE