System Tool

Loanranger

My DH has had the System Tool 'bug' this morning.
He's done a system restore to a week ago and is now running Windows Essentials scan and it is running OK.

The question is: does he still need to do anything about the original system tool infection?

Thanks for help.

aerostar

It may re-occure , so have a look at this link

http://www.bleepingcomputer.com/virus-removal/remove-system-tool

Loanranger

aerostar wrote: »

It may re-occure , so have a look at this link

http://www.bleepingcomputer.com/virus-removal/remove-system-tool

Thanks for the link. I had it already printed out for him to use but he was able to do a system restore.

I suppose my question more accurately phrased should be, does a system restore obviate the need to use a virus removal prog?

Sorry to be so dense!

aliEnRIK

I seriously doubt a system restore will have fixed it

Loanranger

Thanks.

He's signed up for a free 30day trial with Kaspersky (feel sure the Judge will let him off ).
Will Kaspersky find it and deal with it?

Thanks again for your help, much appreciated.

Browntoa

not on its own , you need to follow the proper removal steps posted on post 2

Loanranger

Yes, Malwarebytes found it. :T
Browntoa and aliEnRIK: you're stars; very grateful for your help.:A:A

Browntoa

can we see the malwarebytes log file please, you may need more things removed

Loanranger

Is the log?


Malwarebytes' Anti-Malware 1.50.1.1100
https://www.malwarebytes.org

Database version: 5915

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

01/03/2011 15:59:35
mbam-log-2011-03-01 (15-59-35).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 282326
Time elapsed: 42 minute(s), 51 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\Martin\AppData\LocalLow\Sun\Java\deployment\cache\6.0\42\3e40f3ea-7b9fd755
(Trojan.FakeAlert) -> Quarantined and

fiddiwebb

Loanranger

Did you have a Java update just before your problems?

Loanranger

Fiddiweb, no not that he, the DH, knows of.
Been browsing google for an insurance company and he'd found an entry on MSE from 2008 for Smart People Budget, entitled avoid smart people budget and he clicked on it. Hardly likely to be MSE is it but earlier he'd been on Go Compare.com.