1.

Solve : Laptop catched another spyware infection. Red background, spyware attack warning?

Answer»

Looks good.

.

  • Click START then RUN
  • Now type Combofix /u in the runbox
  • Make sure there's a space between Combofix and /u
  • Then hit Enter.
.
.
----------

The above procedure will:
  • Delete:
    • ComboFix and its associated files and folders.
    • VundoFix backups, if present
    • The C:\Deckard folder, if present
    • The C:_OtMoveIt folder, if present
    • Reset the clock settings.
    • Hide file extensions, if required.
    • Hide System/Hidden files, if required.
    • Set a new, clean Restore Point.
    .
    ----------

    1. Double click OTMoveIt2.exe to launch it.
    Vista users right click and choose Run As Administrator
    2. Click on the CleanUp! button.
    3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
    4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
    5. Once complete exit out of OTMoveIt2

    ---------

    Set a New Restore Point to prevent possible reinfection from an old one
    Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.
    • Go to Start > Programs > Accessories > System Tools and click System Restore
    • Choose the radio button marked Create a Restore Point on the first screen then click Next Give the Restore Point a name then click Create.
    • The new restore point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
    • Next go to Start > Run and type Cleanmgr
    • Click OK
    • Click the More Options Tab.
    • Click Clean Up in the System Restore section to remove all previous restore points except the newly created clean one.
    .
    ----------

    INSTALL this. Let me know if it interferes with your web surfing and we can remove it. It will help to keep you away from dangerous sites and future infections.

    Save DelDomains.inf to the desktop.
    • IE users Right-click on the link and select Save As.
    • Firefox users Right-click on the link and choose Save link as...
    • Save it to the desktop.
    • From the desktop Right-click on DelDomains.inf
    • Select Install making sure Internet Explorer is closed.
    • You won't see anything happen so give it several seconds.
    Note:, if you use SpywareBlaster and/or IE/Spyads, it will be necessary to re-install the protection both afford. For SpywareBlaster, run the program and re-protect all items. For IE/Spyads, run the batch file and reinstall the protection.

    ----------

    It is possible that you will need to reinstall the programs and drivers related to these entries if the infections come back again. If so, and you need help finding out how then start a new topic in the software forum asking for help.

    These are the ones that have been patched,

    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Dell\AccessDirect\dadapp.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
    C:\Program Files\Dell\Media Experience\PCMService.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe
    c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
    c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd.exe
    C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
    C:\Program Files\McAfee.com\MPS\mscifapp.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
    C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe
    C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe
    c:\progra~1\mcafee\MCAFEE~1\masalert.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Yahoo!\Messenger\ypager.exe

    ----------

    How is everything now?
    Thanks again for your help !!



    Everything seems to be running pretty smoothly.

    With the DelDomains thing, thanks !! I really need something that will keep me away from dangerous sites.

    If I do stumble upon a site that will AUTOMATICALLY try and download malware or spyware or anything of that nature, will the DelDomains program alert me somehow?It will actually block the site so you can't get infected.

    Well, that's PERFECT !!

    Thanks [ again ] for your time, patience, and help !!

    No problem.

    I don't know if you did last time or not but another thing I would SUGGEST installing is SiteAdvisor. (Thanks SAVIOR )Cool. I'll get that one right now.


    Discussion

    No Comment Found

    Related InterviewSolutions