items infected, should i delete?

crystal9

all done, how can i show you the infected areas its found? also should i select and delete all?

aliEnRIK

Be helpful if we could see them first

crystal9

aliEnRIK wrote: »

Be helpful if we could see them first

but how without losing info shall i click on file then save report list? or will this lose option to delete?

crystal9

right i risked doing the above and saved the log list what should i delete now please?

QWERTY.exe.exe/data002\32788R22FWJFW\FIND3M.bat;C:\Documents and Settings\tina deacon\Desktop\QWERTY.exe.exe/data002;Probably BATCH.Virus;;
QWERTY.exe.exe/data002\32788R22FWJFW\psexec.cfexe;C:\Documents and Settings\tina deacon\Desktop\QWERTY.exe.exe/data002;Program.PsExec.171;;
data002;C:\Documents and Settings\tina deacon\Desktop;Archive contains infected objects;;
QWERTY.exe.exe;C:\Documents and Settings\tina deacon\Desktop;Container contains infected objects;;
npCouponPrinter.dll;C:\Program Files\Mozilla Firefox\plugins;Adware.Coupons.34;;
A0034928.EXE.vir;C:\Qoobox\Quarantine\C\Documents and Settings\tina deacon\DoctorWeb\Quarantine;Adware.MyWebSearch.15;;
A0034938.DLL.vir;C:\Qoobox\Quarantine\C\Documents and Settings\tina deacon\DoctorWeb\Quarantine;Adware.MWS.72;;
A0035479.dll.vir;C:\Qoobox\Quarantine\C\Documents and Settings\tina deacon\DoctorWeb\Quarantine;Adware.MWS.72;;
A0075045.dll;C:\System Volume Information\_restore{EBE7F5B4-9626-4FB0-8C04-62912E099CB4}\RP744;Probably DLOADER.Trojan;;
A0077646.EXE;C:\System Volume Information\_restore{EBE7F5B4-9626-4FB0-8C04-62912E099CB4}\RP799;Adware.MyWebSearch.15;;
A0077647.DLL;C:\System Volume Information\_restore{EBE7F5B4-9626-4FB0-8C04-62912E099CB4}\RP799;Adware.MWS.72;;
A0077648.dll;C:\System Volume Information\_restore{EBE7F5B4-9626-4FB0-8C04-62912E099CB4}\RP799;Adware.MWS.72;;
A0077691.bat;C:\System Volume Information\_restore{EBE7F5B4-9626-4FB0-8C04-62912E099CB4}\RP799;Probably BATCH.Virus;;

crystal9

can someone help please as i will be turning pc off soon and dont know whether to delete or not

GunJack

What it means is there are infection traces in your system reastore points....delete these findings if it'll let you...

aliEnRIK

Sorry ~ was busy

Delete the lot (Or just the restore points - doesnt matter really)

crystal9

aliEnRIK wrote: »

Sorry ~ was busy

Delete the lot (Or just the restore points - doesnt matter really)

its ok i realise your busy.
so was there nothing really bad there?

crystal9

QWERTY.exe.exe/data002\32788R22FWJFW\FIND3M.bat;C:\Documents and Settings\tina deacon\Desktop\QWERTY.exe.exe/data002;Probably BATCH.Virus;;
QWERTY.exe.exe/data002\32788R22FWJFW\psexec.cfexe;C:\Documents and Settings\tina deacon\Desktop\QWERTY.exe.exe/data002;Program.PsExec.171;;
data002;C:\Documents and Settings\tina deacon\Desktop;Archive contains infected objects;;
it deleted most but not thoses listed above

GunJack

mywebsearch is a pain in the a$$, and suspected trojans too. The QUERTY ones'll be part of COMBOFIX - remember, you renamed it earlier ??
Suggest updating Malwarebytes to the latest version (you're still out-of-date by the look of it) and full scan, and SuperAntiSpyware, update and full scan.... RiK'll have direct links for SAS...won't you matey ??