Removal of fake antispyware/virus programs

You have 1024 MB of RAM not 1224

The free Malwarebytes provides no protection. It is just an after the fact scanner. Spybot without Teatimer also provides no active protection. SpywareBlaster also has no active protection. Yes Spybot's Immunization and SpywareBlaster's features do provide some activeX and bad download site protection but this is not active malware protection. Yes we do recommend using them but they are not enough.

If you keep getting infected, it is because of where people are surfing and what it being downloaded/run. Also you do not have a good firewall installed. You are using the very less than adequate Windows fireall. Have you read this >>> How to Protect yourself from malware!

I have no idea what you are referring to.

Just because they keep coming back, it does not mean they you were still infected. Most of the time it is new infection. Downloading stuff like below is a frequent source of these rogue antispyware tool infections:

Code:

2010-09-07 17:29 . 2010-06-14 15:13  c:\program files\Free Video Joiner

NOTE: You should not be making changes to your system after obtaining and attaching logs. Example, you just said you uninstalled Avast but your ComboFix log showed Avast installed. Basically your logs are now giving us incorrect status on your system.

I strongly recommend that you cleanup your C drive root folder. You are saving things here and you should not be doing that on a long term basis. It slows your PC down, provides an easy hiding place for malware, and some scanners will delete executables found in the root folder since it is not a safe or recommended place to store them.

I also recommend you remove most of those C:\WINDOWS\system32\drivers\etc\hosts file backups. You don't need them. Just keep the most recent backup. Spybot will make another on the next update too.

Your logs are basically clean but we have a few things to fix including leftovers from McAfee and possible cleanup from you having uninstalled Avast which frequenly leaves things behind, so we will remove them just incase.

Uninstall the below software:
Viewpoint Media Player <-- should have been uninstalled in step 5 of the READ ME


Now we need to use ComboFix

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
• If ComboFix tells you it has expired or need to be updated to a new version, make sure you allow it to update.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.


Now run Ccleaner. Only use the Run Cleaner button. Do not run anything else on any other forms.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).


Then attach the below logs:

• C:\ComboFix.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

Please note the instructions that chaslang gave you:

 

Uninstall Comodo and then make sure you have completed my last fix. That last fix tried to address a possible problem with your internet connection which was trying to use a proxy server which you most likely do not use.

 

You're welcome. You need to attach the follow up logs I requested so that we can continue and possibly finish up if everything is working okay.