WiredWX Hobby Weather ToolsLog in

 


Win7 Defender

2 posters

descriptionSolvedRe: Win7 Defender

more_horiz
I have attempted 3 times to load the scanner; all 3 times have resulted in an error showing 2002. I attempted to down load this with my panda cloud disabled as well and still recieve the same error

descriptionSolvedRe: Win7 Defender

more_horiz
Please run Panda ActiveScan online scan.

  • Choose Quick Scan then click the big green Scan now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • Once the scan is completed, please hit the notepad icon next to the text Export to:
  • Save it to a convenient location such as your Desktop
  • Post the contents of the ActiveScan.txt in your next reply

descriptionSolvedRe: Win7 Defender

more_horiz
;***********************************************************************************************************************************************************************************
ANALYSIS: 2012-12-21 18:00:49
PROTECTIONS: 1
MALWARE: 5
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Panda Cloud Antivirus Yes Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\angelgirldebra@yahoo\appdata\roaming\microsoft\windows\cookies\bhib50ob.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\angelgirldebra@yahoo\appdata\roaming\microsoft\windows\cookies\fktozt1z.txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\users\angelgirldebra@yahoo\appdata\roaming\microsoft\windows\cookies\w02951yd.txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\users\angelgirldebra@yahoo\appdata\roaming\microsoft\windows\cookies\btcsnbk8.txt
00262020 Cookie/Atwola TrackingCookie No 0 Yes No c:\users\angelgirldebra@yahoo\appdata\roaming\microsoft\windows\cookies\x3ip9zwp.txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================================================
;===================================================================================================================================================================================

descriptionSolvedRe: Win7 Defender

more_horiz
Good job!

Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

  • Slow computer
  • Error messages
  • Fake antivirus alerts or the icon in the system tray
  • svchost.exe running at 100%
  • System crashes or blue screen of death


Note: Absence of issues does not mean that you're protected in the future.

descriptionSolvedRe: Win7 Defender

more_horiz
I am not receiving any types of messages at this time; does any of the reports I provided indicate the virus has been removed

descriptionSolvedRe: Win7 Defender

more_horiz
Looks to be gone. Smile...

It all appears to be good, so we will finish up to make sure your computer is protected from malware in the future.

Clean up System Restore

Now, to get you off to a clean start, we will be creating a new Restore Point, then clearing the old ones to make sure you do not get reinfected, in case you need to "restore back."

To manually create a new Restore Point

  • Go to Control Panel and select System and Maintenance
  • Select System
  • On the left select Advance System Settings and accept the warning if you get one
  • Select System Protection Tab
  • Select Create at the bottom
  • Type in a name I.e. Clean
  • Select Create

Now we can purge the infected ones

  • Go back to the System and Maintenance page
  • Select Performance Information and Tools
  • On the left select Open Disk Cleanup
  • Select Files from all users and accept the warning if you get one
  • In the drop down box select your main drive I.e. C
  • For a few moments the system will make some calculations:
    Win7 Defender - Page 2 Diskcleanup1
  • Select the More Options tab
    Win7 Defender - Page 2 Moreoptions
  • In the System Restore and Shadow Backups select Clean up
    Win7 Defender - Page 2 Moreoptions2
  • Select Delete on the pop up
  • Select OK
  • Select Delete

Run OTC to remove our tools

To remove all of the tools we used and the files and folders they created, please do the following:
Please download OTC.exe by OldTimer:

  • Save it to your Desktop.
  • Double click OTC.exe.
  • Click the CleanUp! button.
  • If you are prompted to Reboot during the cleanup, select Yes.
  • The tool will delete itself once it finishes.

Note:If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

Purge old temporary files

NOTE: If you already have this installed, you don't have to reinstall it.

Please download CCleaner Slim and save it to your Desktop - Alternate download link

When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.

  • Double-click the CCleaner shortcut on the desktop to start the program.
  • A prompt will ask you if you want CCleaner to do a check to see what cookies it needs to keep. Allow that operation.
  • On the Cleaner tab, click on Run Cleaner on the bottom-right to run the program.
  • Important: Make sure that ALL browser windows are closed before selecting Run Cleaner, or it will ask if you want the program to close them for you (when you do this, all unsaved data may be lost in the browser).


Caution: Only use the Registry feature if you are very familiar with the registry.
Always back up your registry before making any changes. Exit CCleaner after it has completed it's process.

Security Check

Please download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

descriptionSolvedRe: Win7 Defender

more_horiz
Please see log below

Results of screen317's Security Check version 0.99.56
Windows 7 x86 (UAC is disabled!)
Out of date service pack!!
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Panda Cloud Antivirus
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
McAfee SiteAdvisor
CCleaner
Java(TM) 6 Update 27
Java version out of Date!
Adobe Reader 9 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
Panda Security Panda Cloud Antivirus PSANHost.exe
Panda Security Panda Cloud Antivirus PSUAService.exe
Panda Security Panda Cloud Antivirus PSUAMain.exe
Google GoogleUpdateSetup_latest.exe
Symantec Norton Online Backup NOBuAgent.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````

descriptionSolvedRe: Win7 Defender

more_horiz
Adobe Reader Update!

Please download the newest version of Adobe Acrobat Reader from Adobe.com

Before installing: it is important to remove older versions of Acrobat Reader since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs (Programs and Features in Vista/7).
Search in the list for all previous installed versions of Adobe Acrobat Reader. Uninstall/Remove each of them.

Once old versions are gone, please install the newest version.


Java Update!

Please download the newest version of Java from Java.com.

Before installing: it is important to remove older versions of Java since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs (Programs and Features in Vista/7).
Search in the list for all previous installed versions of Java. (J2SE Runtime Environment). Please uninstall/remove each of them.

Once old versions are gone, please install the newest version.

Read more about Java exploit problems


Personal Tips on Preventing Malware

See this page for more info about malware and prevention.


Any other questions before I mark this topic solved?

descriptionSolvedRe: Win7 Defender

more_horiz
I have removed & downloaded the programs as advised; knowing what you know from the logs posted, do I need to download any other programs to prevent this in the future

descriptionSolvedRe: Win7 Defender

more_horiz
I've noticed in my new programs I have a program that states Win7 Defender; this is the same pop up I was receiving over & over. What is this program?

descriptionSolvedRe: Win7 Defender

more_horiz
It is a rogue antivirus program.

Go into CCleaner, hit the Tools > Uninstall...search for the program, select it, and then hit the "Delete Entry" button on the right. It'll make it disappear. Otherwise, all the components of that are removed. Smile...

descriptionSolvedRe: Win7 Defender

more_horiz
Could not find it via CClean; I just deleted it via right clicking on it; based on what you see, we are now clean or virus free? What are tracking cookies how can I stop/prevent them, I noticed in a recent Panda scan tracking cookies were neutralized.

Thank you again for all of your assistance

descriptionSolvedRe: Win7 Defender

more_horiz
Should be fine. You're welcome. Smile...

Topic solved. Big Grin

descriptionSolvedRe: Win7 Defender

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum