Help with Win32:Agent-AWB? (and possibly other infections)

[polonus]

Hi juditelucas,

There are also many lessons learnt from going through an ordeal like this. Coming here, being taught about the importance of secure practices (update software, have latest SUN JAVA version and remove older version(s) manually, because that is not done automatically), and the enormous benefit of using normal user rights on a computer to evade 90 % of the malware that may alter system settings. Yes, use full admin rights only when you update programs, install secure programs, for normal activities on the Internet do not allow full admin rights, install an account with normal user rights, the educated user makes the difference here,

polonus

[juditelucas]

Yes, sir! Next task: convince the "boss" to let me create user accounts with limited rights. In a school with no ICT technician and about 50 computers, limited accounts will often mean limited on-line experience, difficulty in responding to unexpected need for installation of software, etc. This will be my next battle. Will have have to look for some guidance, and will try to use some of the tools you introduced me into, if I believe I can use them safely. I am trying to organize your suggestions and my ideas.

I'm glad there are Evangelists around here . Thank you once more.
JLucas

[oldman]

Right, oldman. I'm not sure I'll be able to do it today. I have spent the whole day updating, scanning, cleaning and disabling auto-run in 15 computers at my school, and there are many others me and my mate will need to clean. I will also make flash disinfection available at school.

Diasbling autoruns will go a long way in helping avoiding this, and so will FDD.

I did need a confirmation: I am supposed to have all the disks with hard drives installed, correct?

If you are asking about system restore, yes.

Will have have to look for some guidance, and will try to use some of the tools you introduced me into, if I believe I can use them safely. I am trying to organize your suggestions and my ideas.

You seemed to handle these ones quite well.

Thank you for your patience, I have been able the piece together a more comprehensive and effective cleaning routine.

[juditelucas]

Hello oldman and polonus.
I have gone through the cleaning process as advised, and am sending the very last Hijackthis log. Hope everything is ok now.

Haven't changed my firewall yet because I installed PCTools and, unsure of what to allow and what to forbid, started forbidden everything it showed - and stopped having access to the internet.
Will have to go through that in the weekend.

God bless you.
JLucas

[oldman]

ashwebsv.exe-webshield
ashmaisv.exe-mail
avast.setup-updates

Those 3 avast entries need  access.

[juditelucas]

OK, thanks.
Seems I didn't attach my hijackthis log after all. Here it goes.
Guess I'll give PCTools another try.

EDIT after sending: after all, the log was already here. Hadn't noticed it though. Sorry.