Trojan removal?

[clevergirl]

Hello here are my logs. What do I do Next? Any help will be greatly appreciated!

[Saving space - attachment deleted by admin]

[CBMatt]

Sorry for the wait.  Things are a little busy with the holiday season and upcoming finals.

You're looking pretty good so far, but there's another thing we should try...
Download ComboFix and save it to your desktop.  Run the program and read its disclaimer (it's fairly short) and make sure you really pay attention to what it says.  Follow the prompts and when finished, it will produce a log at C:\ComboFix.txt.  Go ahead and post that here.  Note: Don't click on the window while it's running; this may cause stalls.

[clevergirl]

Hi. Thanks for your help. I ran combofix and here is the log. You guys are really lifesavers.

[Saving space - attachment deleted by admin]

[CBMatt]

Based on these logs, you should be mostly clean now.  But there is one more thing you should do...

Run a scan with HijackThis and place a check next to this entry if you find it:
O20 - AppInit_DLLs: qxnbqm.dll

Close all other windows and click on Fix Checked.  Then close HijackThis and reboot into Safe Mode and enable hidden files and folders.

Search for C:\WINDOWS\qxnbqm.dll and C:\WINDOWS\system32\qxnbqm.dll, and if you find either one, delete it.


Once you've followed these steps, post a new HijackThis log for me to look at.

[clevergirl]

Hi CBMATT. I followed your instructions and here is the log from hijack this.

[Saving space - attachment deleted by admin]

[CBMatt]

Okay, it looks clean now.  You need to get a good anti-virus, however.  You have some good protection programs, but you need a program such as AVG or Avast.

Now that you no longer need ComboFix, go ahead and uninstall it.  Go to Start > Run and type in combofix /u (note the space) and click OK.

Also, let's clear your System Restore of infected Restore points...

Reset and Re-enable your System Restore to remove any infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files. This is the only way to clean these files: (You will lose all previous restore points which are infected, but that's good news)

Turn OFF System Restore

• On the Desktop, right-click My Computer
  
• Click Properties
  
• Click the System Restore tab.
  
• Check Turn off System Restore
  
• Click Apply, and then click OK

.
Restart your computer

Turn ON System Restore

• On the Desktop, right-click My Computer
  
• Click Properties
  
• Click the System Restore tab.
  
• UN-Check Turn off System Restore
  
• Click Apply, and then click OK

.
System Restore will now be active again

[clevergirl]

Hi Matt. Just wanted to let you know I did what you said and I will be getting AVG OR Avast first thing tomorrow. Until then I am turning my PC off. Thank you so much. I am in school online and my computer is my lifeline. You have been an angel. Once again thank you. Peace.

[CBMatt]

You're very welcome.  I'm just glad I was able to help.