Infected Laptop

macman

I've tried it using the method described on the link below that RIK found, but the command line method does not work.
http://www.expressmetrix.com/techdoc...sp?number=2021
I've also tried to install the Windows Installer Clean Up Utility-but now can't install anything at all, as it says the Installer is already running.
Will keep trying.

Reluctant_spender

Can you post the log that Dr Web produced?

macman

enigma, how do I stop the Installer running in msconfig-can't see any relevant tabs in there?

macman

Every time I try to paste in the log and post it, it crashes the browser-think the log is too big. Might have to come back and have another go later, as not getting anywhere at present.

aliEnRIK

Can you not disable the 'service'?

macman

aliEnRIK wrote: »

Can you not disable the 'service'?

Thanks RIK. I've disabled the Windows Installer via msconfig. How do I now remove the 'Express Software Client Manager' program though? There's no option to remove it in Control Panel>Add/Remove Programs. I've tried using the Uninstall feature in CCleaner, but this tells me that I can't uninstall it-because the Windows Installer is disabled! So it's Catch 22...

aliEnRIK

I ment can you not disable it in the SERVICE menu
If its running there must be a specific service for it surely?

macman

aliEnRIK wrote: »

I ment can you not disable it in the SERVICE menu
If its running there must be a specific service for it surely?

Sorry, I thought you meant the installer itself-all that's done is temprarily stopped the window popping up.
There is nothing listed under 'Services' that seems to relate to 'Express Software'.

aliEnRIK

So youve tried this?

B. How to uninstall the Express Client manually
To uninstall the client manually, run the following command:
msiexec /x {04F73471-157F-4F63-A2AD-50C1BBEECD66}

macman

aliEnRIK wrote: »

So youve tried this?

B. How to uninstall the Express Client manually
To uninstall the client manually, run the following command:
msiexec /x {04F73471-157F-4F63-A2AD-50C1BBEECD66}

Yes, no effect with that. Since I'm not sure that software was harmful (or even what it is-lot of ex-corporate stuff on this laptop), so I've now done a System Restore to put that back, and that has solved the Installer issue (though I've probably got some of the trojans back, because I've reverted to where I was before the 2nd ComboFix run). Not sure quite what to do next...as otherwise it's running OK.
Now trying to remove McAfee and put Kaspersky on it instead.