MG Log Post

Todd Owlett · Oct 7, 2008

This is for my IBM T43 Laptop. It was previously cleaned but I had removed some virus protection and firewall services temporarily in an attempt to get some security updates for Outlook 2003 to install (I keep getting installation failed errors). In the mean time I picked up some type of false security warning virus complete with an active desktop message and continued pop ups from the system tray. The infection appears to be gone now.

TimW · Oct 8, 2008

I also need your logs from running Superantispyware, MalwareBytes and COmboFix.

Todd Owlett · Oct 8, 2008

where was the SuperAnti Spy log saved to? I uninstalled the program after running it. I'm now running Avast Anti-Virus.

TimW · Oct 8, 2008

Have you uninstalled CA Antivirus?

Your SAS log is here:
Code:
C:\Documents and Settings\Todd Owlett\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs\SUPERAntiSpyware Scan Log - 10-06-2008 - 14-40-04.log
You ran Malwarebytes, however it indicates that you did not remove the found items. Was this log from before you removed them?

Todd Owlett · Oct 8, 2008

Yes, it must have been before I removed them.

Yes I unistalled CA AntiVirus, I'm now only using CA Firewall and Avast! CA really slows things down and it didn't detect a bunch of stuff that the other programs did.

Crud, nothing there anymore from Super Anti Spy. I could install and run it again but things seem to be running fine again and Avast did manage to remove a few infected files on the boot time scan after I installed it.

I also solved my non-updating Office 2003, I uninstalled and reinstalled it. MS help forums mentioned reg cleaners sometimes remove entries needed for the updates to work, my registry didn't have the entries at all.

Thanks for all the help.

TimW · Oct 8, 2008

I wasn't seeing anything in your logs of note.....so if you are not having any more malware issues, then we can do the final cleanup:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significan amount of resources ( except a little disk space ) until you run a scan.

If we used Pocket Killbox during your cleanup, do the below

* Run Pocket Killbox and select File, Cleanup, Delete All Backups

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combo-fix folder from combofix.

If we had you run Avenger, you can delete all files related to Avenger now.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

Log in or Sign up

MG Log Post

Todd Owlett Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Todd Owlett Private E-2

Attached Files:

ComboFix.txt

mbam-log-2008-10-07 (09-01-36).txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Todd Owlett Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member