All Sorts of Malware detected by Spyware Doctor

princesslisa · Dec 6, 2008

I was trying to clean trojan.virtumonde off of my husbands computer. OS XP Media Center Edition SP3. I went through your step and programs to remove malware. http://forums.majorgeeks.com/showthread.php?t=139313. Even installed the recovery console. I ran a Spyware Doctor scan and found infections application.nir.cmd and a generic trojan all related to swearwearcombofix. Could be false pos. I don't know. Can you give me some advice or instructions.

DavidGP · Dec 7, 2008

Hi and Welcome

You will need as the guide mentions to attach the logs that will have been gained from running the guide for XP you mention as in the logs will be information that our malware experts can use to determine where the malware is located which will help in giving you some tailored removal instructions for your PC.

A guide on how to attach the logs HOW TO: Attach Items To Your Post

princesslisa · Dec 7, 2008

I ran SUPERAntiSpyware.exe and results were 0 harmful items detected. I also ran SpyBot-Search & Destroy and the results were no immediate threats were found. I have attached the rest of the log results. If everthing is good please tell me how to remove all of these installed tools from my computer. Thank you. For my very first post, I am sorry for the way it sounded, I was frustrated after a long day of fighting malware and to have Spyware Dr. to find so many infections was a bit unselttling.

TimW · Dec 9, 2008

Your logs are clean......

If you are not having any other malware issues, then:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection, but are effective as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

princesslisa · Dec 9, 2008

Yes, I have MB installed and run it when I want to. SuperAnti Spyware loads in the system tray so it runs in the backgound. I have Spyware Doctor installed and real time protection. SD picks up all things, alot of FP but I work through them. I am literate when it comes to security but this is my husbands computer and he is always getting in trouble! Thanks for the log nalyzing! The computer seems to be fine now.:wave

TimW · Dec 9, 2008

You are very welcome.......note that unless Spyware Doctor is a paid for version, then you should just uninstall it.

princesslisa · Dec 9, 2008

It is paid for and I trust it regardless of the problems of FP which happens in all programs some more often than others. I would rather have it identify infections that are FP than not identify any. It is a good program, in my opinion. thanks

TimW · Dec 9, 2008

I just had to ask as the freeware version is worthless.

And again, you are welcome.

princesslisa · Dec 10, 2008

TimW said: ↑

I just had to ask as the freeware version is worthless.

And again, you are welcome.
Click to expand...

I agree!!!

Log in or Sign up

All Sorts of Malware detected by Spyware Doctor

princesslisa Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

princesslisa Private E-2

Attached Files:

log.txt

mbam-log-2008-12-07 (18-03-54).txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

princesslisa Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

princesslisa Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

princesslisa Private E-2