Laptop help, Please!!

MonicaMoo

Trying to sort a Laptop out, that i think has lots of registry infections, viruses and spyware. Had some help recently from some most helpful people and would really appreciate some advice about where to start!

Thanks in advance

MonicaMoo

BTW this is a different laptop, the other one is doing great, thanks to the help I had from here............

MonicaMoo

:hello: Anyone?

beardiedog

To be honest, if it's as bad as it sounds, I'd suggest the best course of action is to format the hard drive and do a clean install.

MonicaMoo

Thanks for the reply, is that as easy as it sounds? Do you have time to give me some instructions, I am officially terrible with computers, I am currently running a Malwarebytes scan to see what it finds as recommended on one of the sticky threads, so far 5 infected objects, it has been running for 10 mins!!! :eek:

beardiedog

Well, no, it's not difficult but you'll have to either save or have to hand any hardware specific drivers and applications to install afterwards. Windows will supply many of the drivers anyway. Don't forget to save any data, files, etc too.

Just bung in the OS CD/DVD and install with a complete format.

MonicaMoo

This is the log if it sheds any light on the problems?

Malwarebytes' Anti-Malware 1.39
Database version: 2468
Windows 5.1.2600 Service Pack 3
21/07/2009 14:34:07
mbam-log-2009-07-21 (14-34-07).txt
Scan type: Quick Scan
Objects scanned: 111460
Time elapsed: 23 minute(s), 47 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 3
Files Infected: 6
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{d810b78a-d010-44df-8445-ac58086b600e} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d810b78a-d010-44df-8445-ac58086b600e} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d810b78a-d010-44df-8445-ac58086b600e} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MalwareRemovalBot (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MalwareRemovalBot (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\plsi (Trojan.Agent) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
C:\Documents and Settings\Ron Speckle\Application Data\MalwareRemovalBot (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
c:\documents and settings\ron speckle\application data\malwareremovalbot\Log (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
c:\documents and settings\ron speckle\application data\malwareremovalbot\Settings (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
Files Infected:
c:\documents and settings\ron speckle\local settings\temporary internet files\Content.IE5\KDM7G1QB\setupxv[1].exe (Rogue.Installer) -> Quarantined and deleted successfully.
c:\documents and settings\default\local settings\temporary internet files\Content.IE5\EDD8ZIXR\Setup[1].exe (Rogue.AntiVirusPro) -> Quarantined and deleted successfully.
c:\documents and settings\ron speckle\application data\malwareremovalbot\rs.dat (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
c:\documents and settings\ron speckle\application data\malwareremovalbot\Log\2009 Jul 21 - 11_48_51 AM_609.log (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
c:\documents and settings\ron speckle\application data\malwareremovalbot\Settings\ScanResults.pie (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\MalwareRemovalBot Scheduled Scan.job (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.

beardiedog

I'm not familiar with the program so I don't know how effective it is. I would also run Adware, Spyware progs as well, as some will find stuff that others don't. Also run CCleaner (free) to check and clean the registry and delete all temp files etc.

Edit: I notice you did a quick scan - I think it would be best to do a deep scan. It'll take a long time, a few hours maybe, but it will check the system more thoroughly.

MonicaMoo

Ok, thanks for the advice, will run full scan and post report when it finishes