Antivirus 2010

[shorty89]

I think I had antivirus 2010. I was on Facebook and all of a sudden I was getting warnings that my computer was being attacked and a new window opened up telling me the same thing. I would try and close out of everything but as soon as I tried running my own virus programs everything would pop back up.

So i started my computer in Safe Mode w/networking and downloaded the Malwarebytes program and ran it. My computer restarted in "regular" mode and all my problems seem to have gone away. I was worried maybe it

[LDTate]

See if you can find either one of these and use Copy/Paste to post the results.

C:\combofix.txt

C:\combofix-quarantine-files.txt

[shorty89]

I finally found it! It was hidden in a file named "Qoobox" and I noticed as I was looking for it some of the files I tried to open would come up with an error message.

Example: File name 'System Volume Information' and my 'Documents and Settings'

"c:\system volume information is not available. Access denied."

Or

[LDTate]

1. Open Internet Explorer. Click on the Tools menu and then select Internet Options.

2. In the the Internet Options window click on the Connections tab. Then click on the LAN settings button.

3. Now you will see Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.

Next:

check some settings on your system:

1. Enter your Control Panel and double-click on Network Connections
   
2. Then right click on your Default Connection
   
   • Usually Local Area Connection for Cable and DSL, or AOL Connection.
     

[*]Left click on Properties

[*]Double-Click on the Internet Protocol (TCP/IP) item

[*]Select the radio dial that says Obtain DNS Servers Automatically

[*]Press OK twice to get out of the properties screen

[*]Restart the computer and let me know how it's running

[shorty89]

I tried to follow your instructions but my options weren

[LDTate]

No problem

Check both of those and see how they're set.

You want Obtain DNS Servers Automatically.

Did you check IE for the other settings?

[shorty89]

I checked the IE settings and the local area connection and everything is set exactly the way you wanted it, I didn

[LDTate]

That's good.

Try running a new Combofix scan now.

[shorty89]

Ok ran combofix here is the report

ComboFix 10-10-18.06 - Sarah 10/19/2010 13:31:07.3.2 - x86

Microsoft

[LDTate]

Good job

The following will implement some cleanup procedures as well as reset System Restore points:

• Click START run
  
• Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  

To be on the safe side, I would also change all my passwords.

Here's my usual all clean post

Log looks good

• Make your Internet Explorer more secure - This can be done by following these simple instructions:
  1. From within Internet Explorer click on the Tools menu and then click on Options.
     
  2. Click once on the Security tab
     
  3. Click once on the Internet icon so it becomes highlighted.
     
  4. Click once on the Custom Level button.
     
  5. Change the Download signed ActiveX controls to Prompt
     
  6. Change the Download unsigned ActiveX controls to Disable
     
  7. Change the Initialize and script ActiveX controls not marked as safe to Disable
     
  8. Change the Installation of desktop items to Prompt
     
  9. Change the Launching programs and files in an IFRAME to Prompt
     
  10. Change the Navigate sub-frames across different domains to Prompt
      
  11. When all these settings have been made, click on the OK button.
      
  12. If it prompts you as to whether or not you want to save the settings, press the Yes button.
      
  • Next press the Apply button and then the OK to exit the Internet Properties page.
    
  • Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week
    (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
    
  • Use a Firewall - I can not stress how important it is that you use a Firewall on your computer.
    Without a firewall your computer is succeptible to being hacked and taken over.
    I am very serious about this and see it happen almost every day with my clients.
    Simply using a Firewall in its default configuration can lower your risk greatly.
    
  • Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly.
    This will ensure your computer has always the latest security updates available installed on your computer.
    If there are new updates to install, install them immediately, reboot your computer, and revisit the site
    until there are no more critical updates.
    
  • Update all these programs regularly - Make sure you update all the programs I have listed regularly.
    Without regular updates you WILL NOT be protected when new malicious programs are released.
    

  Only run one Anti-Virus and Firewall program.

  I would suggest you read How to Prevent Malware:

[shorty89]

Thanks for helping me!

I have a few questions to ask real fast.

I have the following anti-virus programs on my computer

Avira AntiVirus

Windows Defender

AVG

Spybot-search & Destroy

and newly added Malwarebytes

The only thing that is runs all the time is AVG (I think)

My dad bought Kaspersky and thinks I should use it. So should I go through and delete some/all of the other programs? Should I even upload Kaspersky?

My dad was telling me I shouldn

[LDTate]

First off, only have 1 active anti-Virus program running.

I'd uninstall any others.

Windows Defender

Spybot-search & Destroy

and newly added Malwarebytes

Those should all work together without any issues. The free version of MBAM isn't a resident (active) program, but you can scan with it anytime.

My dad was telling me I shouldn

[shorty89]

Thanks for everything!

[LDTate]

You're more than welcome.

Glad we were able to help

Peace be with you

[LDTate]

Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you.