Logs from the read and run programs

Go to

remove the .vir extention (rename) and copy and paste it back into the system32 folder.

NOw tell me what this is:
C:\jwab.exe

Use windows explorer to find and delete:
C:\WINDOWS\system32\rbk2948.bak
C:\WINDOWS\system32\rbk294b.bak
C:\WINDOWS\system32\rbk2950.bak
C:\WINDOWS\system32\rbk2953.bak
C:\WINDOWS\system32\rbk2958.bak
C:\WINDOWS\system32\rbk295b.bak
C:\WINDOWS\system32\rbk2960.bak
C:\WINDOWS\system32\rbk2963.bak
C:\WINDOWS\system32\rbk2968.bak
C:\WINDOWS\system32\rbk296b.bak
C:\WINDOWS\system32\rbk2970.bak
C:\WINDOWS\system32\rbk2943.tmp

Now reboot and tell me how things are running.

Then run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file.

 

I see you renamed the file ( C:\Qoobox\Quarantine\C\WINDOWS\system32\oledb32.dll), but did you right click it ( oledb32.dll ) and choose copy and then paste it back into the C\WINDOWS\system32\ folder?

One last thing to do:

Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.

* Double-click ATF-Cleaner.exe to run the program.
* Under Main choose: Select All
* Click the Empty Selected button.

If you use Firefox browser

* Click Firefox at the top and choose: Select All
* Click the Empty Selected button.
o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

* Click Opera at the top and choose: Select All
* Click the Empty Selected button.
o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main ATF Cleaner menu to close the program.

If you are not having any other malware problems, it is time to do our final steps:

1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They are useful as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /u
     
     • Notes: The space between the combofix" and the /u, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
     
     
   • Delete the C:\combofix folder from combofix (if it exists)
   
   
3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
5. Go to add/remove programs and uninstall HijackThis.
6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
7. If you are running Vista, Windows XP or Windows ME, do the below:
   
   • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
   
   
8. After doing the above, you should work thru the below link:
   
   • How to Protect yourself from malware!
   
   

 

This is just a problem with the installation files. Please do this:

• Download the Microsoft Installer Clean Up utility file and save it on your desktop
• Double click on executable file. The installation process will start. Follow the instructions accordingly
• Once installation process is over, go to Start -> All Programs -> Run Windows Install Clean Up utility
• This will launch the Windows Installer Clean Up utility dialog box
• Under the Installed products list, select the desired JRE version that you want to remove
• Click Remove and Exit

Now see if you can uninstall them.

 

You are quite welcome...safe surfing.