Quote
Virus:Win32/Patchload.O
Disinfected
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1236\A0171165.rbf
Virus:Win32/Patchload.O
Disinfected
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1233\A0170822.exe
TrojanDropper:Win32/Sirefef.B
Removed
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1241\A0173348.sys
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173406.sys
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173410.sys
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173416.sys
Virus:Win32/Patchload.O
Disinfected
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173414.exe
Backdoor:Win32/Smadow.gen!B
Removed
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1232\A0170606.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1232\A0170706.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1233\A0170726.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1235\A0170899.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1235\A0170912.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1236\A0171287.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1239\A0172026.ini
Disinfected
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1236\A0171165.rbf
Virus:Win32/Patchload.O
Disinfected
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1233\A0170822.exe
TrojanDropper:Win32/Sirefef.B
Removed
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1241\A0173348.sys
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173406.sys
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173410.sys
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173416.sys
Virus:Win32/Patchload.O
Disinfected
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1246\A0173414.exe
Backdoor:Win32/Smadow.gen!B
Removed
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1232\A0170606.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1232\A0170706.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1233\A0170726.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1235\A0170899.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1235\A0170912.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1236\A0171287.ini
file:\System Volume Information\_restore{DE83407A-C836-4D2B-8971-497418DA60E4{\RP1239\A0172026.ini
Those are nothing to worry about. Now that we have ran Combofix uninstall your restore point has been reset till present which means all those others will be gone.
Congratulations! You now appear clean!
Are things running okay? Do you have any more questions?
System Still Slow?
You may wish to try StartupLite. Simply download this tool to your desktop and run it. It will explain any optional auto-start programs on your system, and offer the option to stop these programs from starting at startup. This will result in fewer programs running when you boot your system, and should improve preformance.
If that does not work, you can try the steps mentioned in Slow Computer/browser? Check Here First; It May Not Be Malware.
We Need to Clean Up Our Mess
- Download OTC by OldTimer and save it to your desktop.
- Double click
icon to start the program. If you are using Vista, please right-click and choose run as administrator - Then Click the big
button. - You will get a prompt saying "Being Cleanup Process". Please select Yes.
- Restart your computer when prompted.
Recommendations
Below are some recommendations to lower your chances of (re)infection.
- Install and maintain an outbound firewall
- Install Spyware Blaster and update it regularly
If you wish, the commercial version provides automatic updating. - Install the MVPs hosts file, and update it regularly
You can use the HostMan host file manager to do this automaticly if you wish.
For more information on the hosts file, and what it can do for you, you can view the Tutorial on the Hosts file - Install an Anti-Spyware program, and update it regularly
Malware Byte's Anti Malware is an excellent Anti-Spyware scanner. It's scan times are usually under ten minutes, and has excellent detection and removal rates.
SUPERAntiSpyware is another good scanner with high detection and removal rates.
Both programs are free for non commercial home use but provide a resident and do not nag if you purchase the paid versions. - Keep Windows (and your other Microsoft software) up to date!
I cannot stress how important this is enough. Often holes are found in Internet Explorer or Windows itself that require patching. Sometimes these holes will allow an attacker unrestricted access to your computer.
If you are using Windows XP or earlier
Visit the Microsoft Update Website and follow the on screen instructions to setup Microsoft Update. Also follow the instructions to update your system. Please REBOOT and repeat this process until there are no more updates to install!!
If you are using Windows Vista
- Click the "Start Menu" (or Windows Orb)
- Click "All Programs"
- Click "Windows Update"
- On the left, choose "Change Settings"
- Ensure that the checkbox "Use Microsoft Update" at the bottom of the window is checked.
- Press OK and accept the UAC prompt.
Note: You shouldn't need to check this checkbox every single time you update, only the first time. - Click "Check for Updates" in the upper left corner.
- Follow the instructions to install the latest updates.
- Reboot and repeat the "Check for Updates" until there are no more critical updates to install
- Click the "Start Menu" (or Windows Orb)
- Keep your other software up to date as well
Software does not need to be made by Microsoft to be insecure. You can use the Secunia Online Software occasionally to help you check for out of date software on your machine. - Stay up to date!
The MOST IMPORTANT part of any security setup is keeping the software up to date. Malware writers release new variants every single day. If your software updates don't keep up, then the malware will always be one step ahead. Not a good thing
.

Help
This topic is locked





Back to top








