win32/fotomot and AdServer on my computer

The Worldly One · Oct 20, 2008

I have both the above nasties on my computer and are driving me crazy. I have been tempted just to do a factory restore but i have so much on my hard drive that i do not want to lose.
I am 61 years old and not very up with computers so if there is anyone there that can help me i would be so appreciative.

My computer is Microsoft Windows XP Professional
Version 2002, Service Pack 3

Amd Athlon 64 Processor 3000+ using 2.00 GB of RAM

If anyone can assist me please make it in easy to understand words as i really am a duh on computers:cry

TimW · Oct 20, 2008

Welcome to Major Geeks!

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

READ & RUN ME FIRST. Malware Removal Guide

Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

The Worldly One · Oct 21, 2008

I would like to thank TimW and all the support staff here for assisting me with my problems. Since i followed all your instructions 18 hours have passed and neither of my nasties have turned up again, i pray that this may continue and once again thank you for your help.
The Worldly One ( but not with computers )

TimW · Oct 22, 2008

I would feel more comfortable about that if I could see the requested logs. The scans do a good job but do not always get everything.

The Worldly One · Oct 23, 2008

Sorry TimW here are the logs as requested, there are 4 so will use two posts and once again thank you for your assistance and i hope i managed to send these logs ok. Sorry for being such a slow one re computers.

The Worldly One · Oct 23, 2008

this is the funal log, thank you

TimW · Oct 23, 2008

Yup....you are clean.

You can clean up now:

We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Delete the C:\combofix folder from combofix (if it exists)

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Click to expand...

Log in or Sign up

win32/fotomot and AdServer on my computer

The Worldly One Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

The Worldly One Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

The Worldly One Private E-2

Attached Files:

log.txt

mbam-log-2008-10-21 (19-34-23).txt

saslog.txt

The Worldly One Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member