Eeek security tool scareware infection

fiddiwebb

spakkker wrote: »

"Don't run Combofix unless advised to by a qualified user" -why do you say this?

Because Combofix instructions state ........You should not run ComboFix unless you are specifically asked to by a helper. Also, due to the power of this tool it is strongly advised that you do not attempt to act upon any of the information displayed by ComboFix without supervision from someone who has been properly trained. If you do so, it may lead to problems with the normal functionality of your computer............

spakkker

@fiddiweb - not really , those words are a quote from bleeping computer site-

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

The combofix site says no such thing-

http://www.combofix.org/

Also combofix "does it's own job" removing malware then leaves a log, messing about with log items yourself is your own responsibility ,just exactly like taking action with a hijack this log , tho' hijack itself fixes nothing..
Combofix has saved me a lot of time and trouble in the past and it's what I would run in the OP's position.

dogmaryxx

spakkker wrote: »

@fiddiweb - not really , those words are a quote from bleeping computer site-

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

The combofix site says no such thing-

http://www.combofix.org/

Disclaimer

spakkker

Standard disclaimer, found all the time with free software downloads.
At least, hopefully, the OP is now sorted without taking their life in their own hands!

fiddiwebb

spakkker wrote: »

Standard disclaimer, found all the time with free software downloads.
At least, hopefully, the OP is now sorted without taking their life in their own hands!

Standard disclaimer?, new one on me.

The combofix site says no such thing-If you read the blurb from the combofix site it does say ........

IMPORTANT : ComboFix is extremely powerful , You should not run ComboFix.exe unless you are asked to by a trained helper .

http://www.combofix.org/download.php

I agree with you when you say that "does it's own job" but only to a certain extent also you know what newbies are like when let loose with something they can tinker with

nanokitten

fiddiwebb wrote: »

you know what newbies are like when let loose with something they can tinker with

*Homer Simpson voice* Hmm I wonder what this button does.....

Don't worry fiddiwebb I know my limits!

Ok I've run a full scan with MBAM overnight (it's still going after 10 hours so not sure if it is working right) but it has picked up another object. do I need to do anything else to make sure the infection is really gone/wont come back?

HoofeHearted

@nanokitten
When you update and rerun MalwareBytes, make sure you do a Full Scan. Your last run was only a Quick Scan.

Oops! Posts must have crossed in the ether. Glad you ran a Full Scan.:T

fiddiwebb

10 + hours for a full scan?

Something not right there as your previous quick scan was only 18 minutes, it shouldn't take that long for a full scan.

nanokitten

Ok following your comments about MBAM being weird so I went back into safe mode and did another quick scan which picked up another object.
I'll go back and do a full scan in safe mode now.

When I've done that, this tutorial suggests fixing the host files, steps 22 and 23 (which I am nervous to do as I am at the limit of my knowledge) is it something I really need to do?