problem with xpantivirus 2008... think I got it but i am not sure

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by whitetiger768, Jun 1, 2008.

  1. whitetiger768

    whitetiger768 Private E-2

    I am working on a pc for a coworker. Their problems started with xpantivirus 2008. Doing some research on the net this is deemed as malware. I ran the run and read me first programs. I will attach the logs, I want to make sure I got everything. Thanks in advance for any help.
     

    Attached Files:

  2. whitetiger768

    whitetiger768 Private E-2

    here is the last log
     

    Attached Files:

  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Your logs look clean.

    If you are not having any other malware problems, it is time to do our final steps:

    1 If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop & renamed it like we requested.)

    * Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
    * "%userprofile%\Desktop\cf" /u
    o Notes: The space between the cf" and the /u, it must be there.
    o This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    * Delete the C:\cf folder from combofix.
    2 *If we used SmitFraudFix, you can delete all files and folders related to it now including the c:\rapport.txt log.
    3 *If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
    4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    5. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    6. If you are running Windows XP or Windows ME, do the below:
    * Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
    * Then reboot and Enable System Restore to create a new clean Restore Point.
    7. After doing the above, you should work thru the below link:
    How to Protect yourself from malware!
     
  4. whitetiger768

    whitetiger768 Private E-2

    Thank you Tim. I didn't see any other problems so I uninstalled what I had installed to work the run and read me section. I have given the pc back to its owner and told them to let me know if anything else comes up. I also installed spyware blaster, spybot search and destroy, ad-aware 2008, and ccleaner and given them instructions on how to use them. I have used them for quite awhile and have not had any problems. I also told them to run their McAfee scan as well. Thanks again, I love this site, I always get prompt and great help here.
     
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    No problem.....hope all goes well for them. :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds