services.exe trojan + disabled firewall

[danUK]

Attached both logs. As for functionality, everything seems fine at the moment. Firewall working, recovered a lot of disk space, no redirects or blocked sites.

Thanks

[chaslang]

You're welcome.



If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
2. Go back to step 6 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
5. Go to add/remove programs and uninstall HijackThis.
6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
   related to MGtools and some other items from our cleaning procedures.
7. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
   • Refer to the cleaning procedures pointed to by step 7 of the READ ME
     for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
8. After doing the above, you should work thru the below link:
   • How to Protect yourself from malware!

[danUK]

So what did the logs suggest? Is my System OK? I probably wouldn't use it to log into anything sensitive anymore (Banking, Paypal etc.), but is it looking like it might be safe to transfer some .jpg and .wav files to my new PC?

Thanks for all the help guys.

[chaslang]

Originally Posted by danUK

So what did the logs suggest? Is my System OK?

Yes. That is why I gave final instructions. If you had nay other problems, you would have to describe them and then we would make special scans/fixes to address them.

Originally Posted by danUK

I probably wouldn't use it to log into anything sensitive anymore (Banking, Paypal etc.), but is it looking like it might be safe to transfer some .jpg and .wav files to my new PC?

It's up to you but this PC is like just as safe as any new PC that you connect to the internet. Once any PC has been connected to the internet, there are no guarantees that it is 100% clean. However in most cases, running thru a full cleaning process like we perform is a pretty reliable check up. The problems is that many people can get themselves reinfected rather quickly after already have been given the all clean. As stated in the How to protect yourself from malware link, the 1st line of defense and can also be the weakest link. And that is the end user/users of the PC.