Hi JackSession,
I thought I had suggested that you change all your passwords to any forums or financial institutes that you may deal with but looking back throught the topic I don't see it. I think changing you passwords should be enough.
The mbr checks out clean.
Any issues?
Poat back after you are finished and I'll give you some instructions to safely transfer some tools to your other computer.
From your desktop, please delete, if present
- any notepads/logs that we created
- GMER (df807stx.exe)
- aswMBR.exe
- mbr.txt
- aswMBR.txt
- TDSSKiller
- RogueKiller
NextClick the
Start button, click
Run. Copy and paste the following line into the run box and click
OKCombofix /uninstallOpen
OTL then click the
Clean Up button. You may get prompted by your firewall that OTL wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click
Yes. This will do some clean up tasks and delete some of the tools you have downloaded plus itself.
I suggest you keep
MBAM. Keep it updated and use it regularly.
Some Recommendations and prevention tipsBasic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall.
I suggest either for a resident antispyware program.
Windows Defender ORWinpatrol* If you are behind a router Windows firewall should be fine. Otherwise a 3rd party firewall with outbound monitoring is recommended.
Click
FIREWALL for links and tutorials to good, free and paid for firewalls. (
Note: Zone Alarm is becoming bloatware, IMO)
You should also use
Spyware Blaster to help immunize your computer.
- SpywareBlaster will add a large list of programs and sites into your Internet Explorer
settings that will protect you from running and downloading known malicious programs.
ORA guide to understanding and using the hosts file.
Learn how your Hosts file can protect you and how you can protect it.
Besides the Hosts file information, there are links to a very good updated hosts file, a host file manager. and some programs that can protect your hosts file.
HOSTSPlease read the info on disabling the DNS Client before installing a custom hosts file.
-Secure your
Internet Explorer From within Internet Explorer click on the Tools menu and then click on Options.
- Click once on the Security tab
- Click once on the Internet icon so it becomes highlighted.
- Click once on the Custom Level button.
- Change the Download signed ActiveX controls to Prompt
- Change the Download unsigned ActiveX controls to Disable
- Change the Initialize and script ActiveX controls not marked as safe to Disable
- Change the Installation of desktop items to Prompt
- Change the Launching programs and files in an IFRAME to Prompt
- Change the Navigate sub-frames across different domains to Prompt
- When all these settings have been made, click on the OK button.
- If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the
Apply button and then the
OK to exit the Internet Properties page.
- Keeping your Windows up-to-date is crucial to your computer's security. Please go to the
Windows Update Site (using Internet Explorer) and download and install all critical updates on a regular basis
- Make sure you have reset Automatic Updates to your chosen optionClick your start button > Control Panel > System
- Keep your
antivirus program
updated, as well as any other security programs you have.
-More tips and programs can be found
HERE Please post back if you have any problems.