Trend micro house call 6.6

stef240377

There are two on the list that say to reboot pc for disinfection to be carried out i have done this and re scanned and they are still there. Before rescanning made sure programme was upto date aswell amd still to no avail am i doing anything wrong?

Browntoa

malwarebytes has removed some nasties, looks like they were all deleted successfully so you should be ok

when you get time boot into safe mode

http://www.computerhope.com/issues/chsafe.htm

and do a full scan with McAfee

stef240377

Thanks so much for your help, techies are invaluable to us blonde types and i bet you pull your hair out thinking 'why on earth do these people have pc's' lol.

Browntoa

unlike me you probably have better things to do with your time...lol

always glad to help

stef240377

Finding pc still running slow today have rerun malware and still get two items coming up and they are the same every time. I have rebooted pc to complete disinfection and also restarted in safe mode canning with mcafee and nothing is working any more ideas?

Copy of log.

Malwarebytes' Anti-Malware 1.28
Database version: 1222
Windows 6.0.6000
30/09/2008 11:38:53
mbam-log-2008-09-30 (11-38-53).txt
Scan type: Quick Scan
Objects scanned: 53954
Time elapsed: 6 minute(s), 12 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_PCA-FIREWALL (PCAntispyware) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCA-FIREWALL (PCAntispyware) -> Delete on reboot.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

Browntoa

Download SmithfraudFix tool and save it to your desktop

Restart your computer and boot into Safe Mode

Double-click on the SmithfraudFix.exe icon then follow the screen instructions. Select Option #2 .


When you are prompted with “Do you want to clean the registry ?”, simply answer “Y”.

Reboot.

stef240377

Have dl'd the smithfraud and saved to desktop, rebooted pc in safe mode but i can only see files in folder not any on screen instructions, have i done anything wrong? sorry for being a pain in the derriere.

Browntoa

guide here with some pictures

http://www.bleepingcomputer.com/forums/topic17258.html

stef240377

The guide shows a picture of how the smithfraud should show on desktop but mine is not like that it is like a folder. While awaiting a reply i clicked on the link again in your message to get the blue page to come up for the scan, followed the directions to the letter but it says no infections found, re-scanning using malware states the 2 problems are still present. So nothing has changed except i have no longer got my background pic on desktop.

stef240377

Think a problem maybe it says for xp/2000 and im on vista??