Win 7 Security 2011 $59.95 - Urgent Help Please

[Deleted User]

Yes, Grandmaster - I ran Sup;erAntiSpyware. It showed about 12 adware Tracking Cookie. I ticked to quarantine them and have left them there in quarantine as I did not know what else to do. Are they OK there or do you think I need to do anything else with them?

Thankyou again.

Crimson

[Deleted User]

Grandmaster helpfully wrote "Your hijackthis log seems fine althoug things can be removed to speed up computer which I shall leave for someone else to do who can advise better than me."

I am eager to learn and if anyone can offer advice on this I;ll be grateful, thank you.

Crimson.

GunJack

I would suggest you're not clear yet, as RKill has stopped the same two processes.

The_Grandmaster

Can you post the Microsoft Security Essential log list or the names of the files which were quarantined.

I personally don't know if a program has managed to delete the malware or not from the information above. A system restore I would have thought would not remove the malware.

Before going back to online banking, I would be happier if alienRIK (antivirus expert on this board) asks you to run combofix and if he reads the log. When he says your computer is safe, I would only then start online banking.

The_Grandmaster

Also you say antispyware found 12 tracking cookies or adware? Cookies are not bad but adware is, so may you specify which.

closed

have you scanned with tdsskiller yet?

[Deleted User]

Yes, Closed - TDSSKiller showed no threats/infections so thank you for suggesting the link.

Crimson

closed

ok, yet another scanner to try

http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/

[Deleted User]

I have just a few minutes completed a SuperAntiLSpyware Quick Scan which took 18 minutes. (I was unsuccessful in trying to access details of the previous adware cookie threats which were quarantined. New results from this scan: Memory Items 0 detected. Registry Items 0 detected.

But - File Items 3 threats detected. Trojan.Agent/Gen-IExplorer (Fake)
C:\USERS\CHRISTINE\APPDATA\LOCAL\TEMP\RARSFXD\NIRD\EXPLORER.EXE (I copied the details because I could not copy and paste them.)

I followed the instructions to have them completely removed and, as advised, I selected Reboot at 2150 hours. I hope this has sorted that problem. I am now going to run Microsoft Security Essentials.

It seems like a very long haul but I'm not complaining because, with all the help I've received, I'll just be only to glad to have things 'back to normal.'

Crimson

GunJack

I would run combofix on this one, and post the log back here. I would expect to see at least a couple of deletions, probably the two that RKill is stopping.......

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

follow the instructions, and you'll need to disable youe AV (mse in your case)