zafi.B trojan infection

• Now open a new notepad file.
  
• Input this into the notepad file:
  

  
  Windows Registry Editor Version 5.00
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "vinclock"=-
  
  

  
  
• Save this as fix.reg, save it to your desktop.
  
• Double click fix.reg to run it.
  
• Select yes to the registry merge prompt.
  

What problems remain now?

Nothing remains that I can see. That is nothing seems to be interfering with the computer's function. Is there anything else you recommend doing just to be sure? If everything is indeed fine, can you recommend ways to protect the computer?

You are running two AV's, this is a bad idea as they can conflict and cause problems. I see Symantec and AVG7.
I would recommend that you remove AVG7 to avoid conflict and other future problems.

Go to Start > Control Panel > Add/Remove Programs and remove the following programs if present.

• AVG7
  

I also see Abode Reader 8. This is an old version and is open to malware attacks, we need to close these holes.
Uninstall Abode Reader 8 like you did AVG7, then once version 8 is gone, please download version 9 from here and install it:
http://get.adobe.com/uk/reader/
====

We need to make a new restore point.

To turn off System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (or the Turn off System Restore on all drives check box), and then click OK.
4. Click Yes when you receive the prompt to the turn off System Restore.

Now we need to make a new restore point.
To turn on System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (To turn on System Restore), and then click OK.

Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we are to help you, for your sake we would rather not have repeat customers.

1) Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates , or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

2) In order to protect yourself against spyware, you should consider installing and running the following free programs:

Ad-Aware SE
A tutorial on using Ad-Aware to remove spyware from your computer may be found here.

Spybot-Search & Destroy
A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.

SpywareBlaster
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.

SpywareGuard
A tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found here.

Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

3) Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here:
http://www.mozilla.org/products/firefox/
I also recommand the following add-ons for Firefox, they will help keep you safe from malicious scripts or activeX exploits.
https://addons.mozilla.org/en-US/firefox/addon/722
https://addons.mozilla.org/en-US/firefox/addon/1865
https://addons.mozilla.org/en-US/firefox/addon/433

4) Also make sure to run your antivirus software regularly, and to keep it up-to-date.

To help you keep your software updated, please considering using this free software program that will check for program updates.
Update Checker

5) Finally, consider maintaining a firewall. Some good free firewalls are Kerio, or
Outpost
A tutorial on understanding and using firewalls may be found here.

Please also read Tony Klein's excellent article: How I got Infected in the First Place

Hopefully this should take care of your problems! Good luck.

Sweet! Thank you! Couple more questions though

I like Mozilla very much. Can I uninstall Internet Explorer as they are both pretty big programs and it seems like a waste of space to have them both installed and not use one?

Symantec has been outdated for a long time - the owner of the computer I was using does not wish to pay for virus updates, etc. Should I uninstall Symantec all together? If Symantec is not going to be used, is AVG a good alternative? If not, have you a recommendation?

Windows has an onboard firewall (unless I'm mistaken). Is this insufficient? Will running either of the other firewalls you mentioned cause a conflict with Windows?

That's all I can think of at this point. I really appreciate your help. What I've learned from you will go a long way to protecting my personal computer, this other computer and anyone else's I can pass this great stuff on to!


xiaohui
(christine)

Hello.
No, I would recommend you to keep IE, I use Mozilla too, but keep IE because you can access Windows Updates through it.

Okay, please download one of these two AV's:

1) Antivir PersonalEditionClassic
-Free anti-virus software for Windows.
-Detects and removes more than 50,000 viruses. Free support.
2) avast! 4 Home Edition
-Anti-virus program for Windows.
-The home edition is freeware for noncommercial user.

Then uninstall Norton/Symentec AND AVG, then install either Avira or avast! you downloaded.
DO NOT SURF without an AV active.

Windows Firewall is only basic, running one of the firewalls I recommended will improve your security.

Please delete dds.com from your Desktop.

Excellent! I'm so glad folks like you exist!

Since this issue is resolved, this topic is closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else, please open a new topic for your questions.