[RB211]

Hope this works. Thanks guys

Danny

http://www.savefile.com/files/1487794

[evilfantasy]

Looks good, how is everything now?

[RB211]

LOL Wow you are fast!!! Yeah shes running nicely now..Oh and if I were to buy a package to stop all this happening again, what would you recommend?

[evilfantasy]

There are plenty of free security solutions that will be in the links at the bottom of this post.


Time to do some cleanup and secure the work you have done.

• Click START then RUN
• Now type Combofix /u in the runbox
• Make sure there's a space between Combofix and /u
• Then hit Enter.

The above procedure will:

• Delete:
  • ComboFix and its associated files and folders.
  • VundoFix backups, if present
  • The C:\Deckard folder, if present
  • The C:_OtMoveIt folder, if present
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Set a new, clean Restore Point.

Download OTMoveIt2 by OldTimer OTMoveIt2.exe and place it on your desktop. (unless you already have it)

1. Double click OTMoveIt2.exe to launch it.
Vista users right click and choose Run As Administrator
2. Click on the CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)

• When finished exit out of OTMoveIt2

Set a New Restore Point to prevent possible reinfection from an old one
Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.

• Go to Start > Programs > Accessories > System Tools and click System Restore
• Choose the radio button marked Create a Restore Point on the first screen then click Next Give the Restore Point a name then click Create.
• The new restore point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
• Next go to Start > Run and type Cleanmgr
• Click OK
• Click the More Options Tab.
• Click Clean Up in the System Restore section to remove all previous restore points except the newly created clean one.

Use the Secunia Software Inspector to check for out of date software.
Out of date software has security vulnerabilities that malware can exploit.

• Click Start Now
• Check the box next to Enable thorough system inspection.
• Click Start
• Allow the scan to finish and scroll down to see if any updates are needed.
• Update anything listed.

Check out Keeping Yourself safe On The Web for tips and free tools to keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

[RB211]

when I get to "run and type Cleanmgr and hit ok i just get a what drive to clean etc? c,d,e etc etc

[evilfantasy]

Lets clear your system restore points this way instead.

Reset and Re-enable your System Restore to remove any infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files. This is the only way to clean these files: (You will lose all previous restore points which are infected, but that's good news)

Turn OFF System Restore

• On the Desktop, right-click My Computer
• Click Properties
• Click the System Restore tab.
• Check Turn off System Restore
• Click Apply, and then click OK

Restart your computer

Turn ON System Restore

• On the Desktop, right-click My Computer
• Click Properties
• Click the System Restore tab.
• UN-Check Turn off System Restore
• Click Apply, and then click OK

System Restore will now be active again

Now set a new restore point

• Go to Start, then Programs, then Accessories, then System Tools
• Choose System Restore
• When the program starts, make sure that Create a Restore Point is checked, the click Next
• Give the restore point a name, then click Create, then Close to complete.

[RB211]

I have gone to the desktop, right clicked, properties but there is no system restore tab.....

[evilfantasy]

Go to Start > All Programs > Accessories > System Tools > System Restore

[RB211]

OK I've made a new restore point..

[evilfantasy]

Well that was easy enough

Good job!