Log Review After Malware Removal

Josr · Feb 23, 2009

Hello All:

I ran the Malware Removal guide on my daughter's laptop after she complained of many infections. The OS is Vista Home Premium, SP1.

She downloaded "AntiVirus1"and I think this was the major problem. SUPERAntiSpyware detected it as a rogue and it appears to be gone. Several other minor problems removed by Spybot S&D and Malwarebytes Anti-malware. I am attaching the generated logs to be certain all malware is removed.

The only log not attached is ComboFix. When I attempted to run it, it stopped with a Win32 only error, due to an incompatible OS. So I am interested to know what went, or I did wrong.

Thank you in advance for your time in evaluating the generated log files.

Respectfully,

Josr:banghead

Josr · Feb 23, 2009

MG Tools Log attachment for above post.

TimW · Feb 24, 2009

Your logs are clean.....If you are not having any other malware problems, it is time to do our final steps:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They are useful as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Josr · Feb 25, 2009

Hello Tim:

Thank you for your time. I have completed the final steps and have also printed out the "Basic Maintenance" and the " How to Protect yourself from malware" guides for my daughter. Going forward I believe she will be protected.

I would still like to know why ComboFix would not run on her machine? As stated above it gave a Win32 error, incompatible OS. Same with all the recommended software fire walls, they claim to not support a 64 bit OS.

Thanks again, I look forward to your answers.

Respectfully

Josr

TimW · Feb 25, 2009

Josr said: ↑

I would still like to know why ComboFix would not run on her machine? As stated above it gave a Win32 error, incompatible OS. Same with all the recommended software fire walls, they claim to not support a 64 bit OS.

Thanks again, I look forward to your answers.

Respectfully

Josr
Click to expand...

There are many programs that will not run on 64bit systems.

Log in or Sign up

Log Review After Malware Removal

Josr Private E-2

Attached Files:

SUPERAntiSpyware Scan Log - 02-23-2009 - 07-21-07.log

Checks.090223-0850.txt

mbam-log-2009-02-23 (10-05-04).txt

Josr Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Josr Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member