Infected!!! Please Help!

[quinngs]

I ran a Malwarebyte scan and it showed several items and I removed them succesfully. I reran it and it came back clean, no problems. I ran Superantispyware and it found several infections. I am attaching a couple of log files, please take a look. Thanks!

Attach.zip

ark.zip

[Maniac]

Hello quinngs! Welcome to MalwareBytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

• The process of cleaning your system may take some time, so please be patient.
  
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  
• Instructions that I give are for your system only!
  
• If you don't know or can't understand something please ask.
  
• Do not install or uninstall any software or hardware, while work on.
  

Step 1

Please, uninstall the following applications:

1. Adobe Reader 8.2.2
   

You can read, how to this here:

• Windows XP
  
• Windows Vista
  
• Windows 7
  

Step 2

I also see you have Viewpoint installed...

Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This will change from what we know in 2006 read this article: http://www.clickz.com/news/article.php/3561546

I suggest you remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present.

• 
  
• Viewpoint
  
• Viewpoint Manager
  
• Viewpoint Media Player
  

Step 3

• Launch Malwarebytes' Anti-Malware
  
• Go to "Update" tab and select "Check for Updates". If an update is found, it will download and install the latest version.
  
• Go to "Scanner" tab and select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply.
  

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

In your next reply, please include these log(s) in this sequence:

1. MalwareBytes' Anti-Malware log
   
2. a new fresh DDS log only
   

[quinngs]

Thanks for helping so quickly!!

I could not locate Adobe Reader 8.2.2, but found Adobe Reader 7.0 and removed it. Also here are the logs requested. I also removed the viewpoint in question.

Attach.zip

mbam_log_2010_06_04__13_10_00_.txt

[Maniac]

Good!

How are things now?

[quinngs]

Borislav,

I had an unexpected trip come up and had to go out of town, Will post on Monday morning. Sorry for the delay.

[Maniac]

No problem

Have a safe trip!

[quinngs]

OK I am back from trip....sorry. I ran a malwarebytes this morning and it found nothing. Then I ran a superantispyware scan and it found several items which I quarantined and removed. I rebooted and reran scan and nothing. All seems to be clean now....THANKS. Can we re-enable the cd-rom emulators now? Thanks again for all of your help!

[Maniac]

Good!

Last steps:

Step 1

To enable CD Emulation programs using DeFogger please perform these steps:

1. Please download DeFogger to your desktop.
   
2. Once downloaded, double-click on the DeFogger icon to start the tool.
   
3. The application window will now appear. You should now click on the Enable button to enable your CD Emulation drivers
   
4. When it prompts you whether or not you want to continue, please click on the Yes button to continue
   
5. When the program has completed you will see a Finished! message. Click on the OK button to exit the program.
   
6. If CD Emulation programs are present and have been enabled, DeFogger will now ask you to reboot the machine. Please allow it to do so by clicking on the OK button.
   

Step 2

Please manually delete DDS, GMER and Defogger.

Step 3

Please download and install the latest version of Adobe Reader from:

www.adobe.com

Step 4

Some malware preventions:

http://miekiemoes.blogspot.com/2008/02/how...nt-malware.html

Safe surfing!