don't know where to start

[Drd]

OK. Thanks for everything so far. I had some trouble downloading the BitScanner, but it's up and working now. Of the two scans it does, one is 100% finished, the other 64 and counting.
Please stay tuned!
In peace
Dr.D.
P.S. I also downloaded the spam thing and will install that now

[Drd]

I'm having trouble with the spamfighter installation. When it asks for a sign in, I give it my email and a password, click next, but it just doesn't move to the next phase.  At first the next button dims, as if things will happen, and I get the little hourglass that signifies wait, but then the next button lights up again, as if nothing happened. I tried exiting the setup and trying a couple more times, but that didn't work.
 This was about a 2 hour download. Should I uninstall/delete and download again, or what do you suggest?
Thank you.
In peace
Dr. D.

[Drd]

http://www.filedropper.com/bitdefenderscan_1  This is the link to the bitdefender file. Whew!

Thanks for your help.

In peace

DrD

[evilfantasy]

How is the computer running now?

[Drd]

It seems okay to me. In fact, I never really had any trouble with it. What had happened was that when I was installing a new CD for my kids, a copy, I got this "trojan horse" warning from AVG, and then when I went to do a scan AVG said that its driver was gone!  That was the first and only problem I had. Then, I got in touch with you guys right away. So, That's the answer to that question.

  Of course, I still have the horrible spam problem.  I have two email addressses, both of them come into my OE. One is my gmail address, which doesn't let the spam through. It seems to catch that kind of thing. The other is not a gmail address, and that one is getting the spam. Because it's a business address though, I don't want to change it.
  As I mentioned, I did the download for Spamfighter but it stalls on installation. When it asks for an email address and password, and I click enter. nothing happens.

 Anyway, to answer your question: the computer seems fine now.
  Also, in the bitdefender report I saw that one of the infected files was a file from a CD that I had downloaded, an original.  Do I assume that the CD is infected and therefore get rid of it, or did the trojan horse sneak into the file after it was downloaded? Is there a way I can tell?  The CD is part of my work and I need to use it; so if it's infected I would have to get another one. And, is there anyway to check a CD when you first get it to see if it's ok?
Thanks.
In peace
Dr.D.

[evilfantasy]

Try starting a topic in the Windows Forum about the spam problem. I don't use Outlook so can't really give a good answer.

Cleanup...

Let's clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if launched accidentally. These steps will also help secure the work you have done.
.

• Click START then RUN
  
• Now type Combofix /u in the runbox
  
• Make sure there's a space between Combofix and /u
• Then hit Enter.

.

.
The above procedure will:

• Delete:
• ComboFix and its associated files and folders.
• VundoFix backups, if present
• The C:\Deckard folder, if present
• The C:_OtMoveIt folder, if present

• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Set a new, clean Restore Point.

.
----------

Download OTMoveIt3 by OldTimer OTMoveIt3.exe and place it on your desktop. (unless you already have it installed)

1. Double click OTMoveIt3.exe to launch it.
Vista users right click and choose Run As Administrator
2. Click on the CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
5. Once complete exit out of OTMoveIt3

----------

Use the Secunia Software Inspector to check for out of date software.

• Click Start Now
  
• Check the box next to Enable thorough system inspection.
  
• Click Start
  
• Allow the scan to finish and scroll down to see if any updates are needed.
• Update anything listed.

.
----------

Go to Microsoft Windows Update and get all critical updates.

----------

Here are some great FREE tools to help you keep from getting infected again. These tools use little or no resources so won't slow down your PC.

Concerned about Browser Security? Consider using Mozilla Firefox. With more than 15,000 improvements, Firefox 3 is faster, safer and smarter than ever before.

For Internet Explorer 7 users there is IE7Pro. IE7Pro is a must have add-on for Internet Explorer, which includes a lot of features and tweaks to make your IE friendlier, more useful, more secure and customizable.

To prevent unknown applications from being installed on your computer install WinPatrol 2008
* Using Winpatrol to protect your computer from malicious software

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster - Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

[Drd]

Hello: I'm getting an "Error 404" This page cannot be found notice when I try to get to the OTMOVE3 link that is in the last post you sent me. Is there a different way to get to this? Should I just proceed without it or wait until we can find a different way to get there?

many thanks
In peace
DrD

[Drd]

When I go to the Secunia site, I get a message that there is a problem with my Java applet, but I don't know what to do to fix that problem. What do you suggest?
thank you
In peace
DrD

[evilfantasy]

http://download.bleepingcomputer.com/oldtimer/OTMoveIt3.exe

--

First install the new Sun Java Runtime Environment

Be sure to close all browser windows before beginning the install.

Remove the old version(s)

Download JavaRa

• Unzip the file and open the JavaRa.exe
• Click Remove Older Versions
  
• JavaRa will search for and remove any outdated version of Java and remove any that are found.
• Click Additional Tasks
  
• Place a check next to Remove Useless JRE Files and click Go
  
• Exit JavaRa
  
• Delete the JavaRa files from the Desktop

[Drd]

Hello: I just wanted to give you an update: I eliminated the old java and put in the new one. I did the moveit thing and the computer restarted; I guess that's normal.

 Now, I'm doing the secunia. Are we getting close to being finished? Can you tell me approximately how many more stages we have to go through?
 Also, would my assumption be correct that this entered through a copied CD? And if so, if there anything I could/should do when purchasing a CD to make sure that it is not hiding something vicious?

Oh, the Secunia just finished. It showed that my Adobe files were outdated, all three of them. Do I need to delete the old ones when the new ones come in or is this done automatically. Also, my quick time is expired, and my  yahoo messenger. I'll just delete the messenger I think. I don't use it anyway.

Also my Macromedia flash is outdated.  I assume I should fix that too.

Anything I should know or do at this point?
Thanks for answering all my questions.

In peace
Dr.D

[Drd]

Speaking of Secunia: It says that I have to update my Firefox from 3.1 to 3.6, but when I go to the "about firefox" button in my browser, it says I'm already using 3.6. Can I trust Secunia to really know what is in my computer? Shoudl I really take the time to do all these downloads when I may already have the latest versions? Should I delete older versions that might still be lurking somewhere?
Please advise.
In peace
Dr. D.

[evilfantasy]

Can I trust Secunia to really know what is in my computer? Shoudl I really take the time to do all these downloads when I may already have the latest versions? Should I delete older versions that might still be lurking somewhere?

Yes. The old versions ususlly have security issues that are patched by the new versions.

Look in Add/Remove Programs and see if Firefox 3.1 is listed.

----------

Do this to remove all unstable older versions of Flash.

Download the Flash Player Uninstaller and save it to your desktop.

Run the uninstaller program and then reboot your computer to complete the uninstall.

Download and install the latest version of Flash Player

----------

Update the other things that Secunia says are out of date.

Were done with malware cleanup. I don't know where it came from...

[Drd]

I looked in my add/remove program list and firefox 3.01 is not listed there, only Firefox 3.06.  Should I reinstall it anyway?
Thanks for all the help during this process. I so appreciate your being there.

In peace
DrD

[evilfantasy]

Look in C:\Program Files\Mozilla fo ra Ff 3.01 folder and delete it.

If not then try reinstalling.