Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: "System Tool 2011" virus + Taskbar keeps swithching themes  (Read 23422 times)

0 Members and 1 Guest are viewing this topic.

Alvarezz

    Topic Starter


    Rookie

    • Experience: Beginner
    • OS: Windows XP
    Re: "System Tool 2011" virus + Taskbar keeps swithching themes
    « Reply #15 on: January 12, 2011, 08:41:31 AM »
    Thanks for the fix :) Okay, the complete scan finished, however, there is no option to report incurable. Should I just save the report list and exit  the program afterwards? ???

    SuperDave

    • Malware Removal Specialist


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: "System Tool 2011" virus + Taskbar keeps swithching themes
    « Reply #16 on: January 12, 2011, 12:11:42 PM »
    Please try running the ESET scan again.
    Windows 8 and Windows 10 dual boot with two SSD's

    Alvarezz

      Topic Starter


      Rookie

      • Experience: Beginner
      • OS: Windows XP
      Re: "System Tool 2011" virus + Taskbar keeps swithching themes
      « Reply #17 on: January 14, 2011, 07:41:39 PM »
      Dr web Report list


      Process in memory: C:\WINDOWS\system32\svchost.exe:744;;BackDoor.Tdss.565;Eradicated.;
      f_0005c3;C:\Documents and Settings\My Computer\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache(2);Probably SCRIPT.Virus;Incurable.Moved.;
      sma_common[1].js;C:\Documents and Settings\My Computer\Local Settings\Temporary Internet Files\Content.IE5\SLEFKDEB;Probably SCRIPT.Virus;Incurable.Moved.;
      change.log.1;C:\System Volume Information\_restore{BABF27AF-98B1-46AD-8AEE-3507E0DEE2FA}\RP173;Modification of Trojan.DownLoad1.17823;Incurable.Moved.;
      sma_common.js;I:\common\inc;Probably SCRIPT.Virus;;
      sprt_common.js;I:\sprtcommon\inc;Probably SCRIPT.Virus;;

      SuperDave

      • Malware Removal Specialist


      • Genius
      • Thanked: 1020
      • Certifications: List
      • Experience: Expert
      • OS: Windows 10
      Re: "System Tool 2011" virus + Taskbar keeps swithching themes
      « Reply #18 on: January 15, 2011, 12:26:37 PM »
      That  looks good. If there are no other issues, let's cleanup. You may keep SAS and MBAM, if you wish. Update them and run them regularly.

      Download OTL to your desktop.
      To remove all of the tools we used and the files and folders they created do the following:
      Double click OTL.exe.
      • Click the CleanUp button.
      • Select Yes when the "Begin cleanup Process?" prompt appears.
      • If you are prompted to Reboot during the cleanup, select Yes.
      • The tool will delete itself once it finishes.
      Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
      **********************************************
      To turn off Windows XP System Restore:

      NOTE: These instructions assume that you are using the default Windows XP Start Menu and have not changed to the Classic Start menu. To re-enable the default menu, right-click Start, click Properties, click Start menu (not Classic) and then click OK.

      1. Click Start.
      2. Right-click the My Computer icon, and then click Properties.
      3. Click the System Restore tab.
      4. Check "Turn off System Restore" or "Turn off System Restore on all drives"
      5. Click Apply.
      6.  When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
      7. Click OK.
      8. Restart the computer and follow the instructions in the next section to turn on System Restore.

      To turn on Windows XP System Restore:

      1. Click Start.
      2. Right-click My Computer, and then click Properties.
      3. Click the System Restore tab.
      4. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives."
      5. Click Apply, and then click OK.
      This will give you a new, clean Restore Point.
      ********************************************
      Clean out your temporary internet files and temp files.

      Download TFC by OldTimer to your desktop.

      Double-click TFC.exe to run it.

      Note: If you are running on Vista, right-click on the file and choose Run As Administrator

      TFC will close all programs when run, so make sure you have saved all your work before you begin.

      * Click the Start button to begin the cleaning process.
      * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
      * Please let TFC run uninterrupted until it is finished.

      Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
      ******************************************
      Use the Secunia Software Inspector to check for out of date software.

      •Click Start Now

      •Check the box next to Enable thorough system inspection.

      •Click Start

      •Allow the scan to finish and scroll down to see if any updates are needed.
      •Update anything listed.
      .
      ----------

      Go to Microsoft Windows Update and get all critical updates.

      ----------

      I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

      SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
      * Using SpywareBlaster to protect your computer from Spyware and Malware
      * If you don't know what ActiveX controls are, see here

      Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

      Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

      Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
      Safe Surfing!
      Windows 8 and Windows 10 dual boot with two SSD's

      Alvarezz

        Topic Starter


        Rookie

        • Experience: Beginner
        • OS: Windows XP
        Re: "System Tool 2011" virus + Taskbar keeps swithching themes
        « Reply #19 on: March 13, 2011, 05:43:21 PM »
        What are the programs that OTL is supposed to remove?
        If they are not removed will it make my computer slow to start up?

        SuperDave

        • Malware Removal Specialist


        • Genius
        • Thanked: 1020
        • Certifications: List
        • Experience: Expert
        • OS: Windows 10
        Re: "System Tool 2011" virus + Taskbar keeps swithching themes
        « Reply #20 on: March 13, 2011, 07:11:41 PM »
        Quote
        What are the programs that OTL is supposed to remove?
        If they are not removed will it make my computer slow to start up?
        They will not make your slow to start unless you have them running at startup. Here's a handy program to check to see what's running at startup.
        !Killbox
        *.run
        _backupD
        _OTL
        _OTListIt
        _OTM
        _OTMoveIt
        _OTS
        _OTScanIt
        404fix.exe
        Avenger
        avenger.exe
        avenger.txt
        avenger.zip
        AWF.txt
        BFU
        bfu.zip
        catchme
        catchme.exe
        cleanup.txt
        ComboFix
        ComboFix*.txt
        combofix.exe
        combo-fix.exe
        Combo-Fix.sys
        dds.com
        dds.pif
        dds.scr
        Deckard
        delete.bat
        deljob
        deljob.exe
        dss.exe
        dumphive.exe
        erdnt\subs
        Extras.txt
        fdsv.exe
        FindAWF.exe
        fixwareout
        fixwareout.exe
        fsbl*.log
        fsbl.exe
        gmer
        gmer.dll
        gmer.exe
        gmer.ini
        gmer.log
        gmer.sys
        gmer_uninstall.cmd
        grep.exe
        haxfix.exe
        haxfix.txt
        iedfix.exe
        killbox.exe
        logit.txt
        Lop SD
        lopR.txt
        LopSD.exe
        moveex.exe
        nircmd.exe
        NoLop.exe
        NoLop.txt
        NoLopOLD.txt
        OTL.exe
        OTL.txt
        OTListIt.txt
        OTListIt2.exe
        OTM.exe
        OTMoveIt.exe
        OTMoveIt2.exe
        OTMoveIt3.exe
        OTS.exe
        OTS.txt
        OTScanIt
        OTScanIt.exe
        OTScanIt2
        OTScanIt2.exe
        OTViewIt.exe
        OTViewIt.txt
        QooBox
        rapport.txt
        Rooter$
        Rooter.exe
        Rooter.txt
        RSIT
        RSIT.exe
        Runscanner
        Runscanner.exe
        Runscanner.net
        Runscanner.zip
        Rustbfix
        rustbfix.exe
        SDFix
        sdfix.exe
        sed.exe
        Silent Runners.vbs
        SmitfraudFix
        SmitfraudFix.exe
        swreg.exe
        Swsc.exe
        Swxcacls.exe
        SysInsite
        tmp.reg
        vacfix.exe
        vcclsid.exe
        VFind.exe
        VundoFix Backups
        VundoFix.exe
        vundofix.txt
        vundofix.vft
        win32delfkil.exe
        windelf.txt
        WinPfind
        winpfind.exe
        WinPFind35u
        WinPFind35u.exe
        WinPFind3u
        WinPFind3u.exe
        WS2Fix.exe
        zip.exe
        StartupLite

        Download StartupLite by MalwareBytes to your Desktop.
        Doubleclick StartupLite.exe to launch the program.
        Ensure the Disable box is checked.
        Click Continue.
        A pop up message will tell you the unecessary startup items in your list have been disabled and ask you to restart your computer.
        Re-start your computer.
        Windows 8 and Windows 10 dual boot with two SSD's