Webuser Forums: help with father-in-laws hijack this log please

Hi jim,

About this entry flaged up by panda:
Potentially unwanted tool:Application/MyWay Not disinfected C:\Config.Msi\1dac91.rbf
Myway is pre installed on Dell Computers so its best to leave it if its not causing any problems.
The .RBF files and the config.msi folder are used by the Windows Installer rollback process. The rollback script (.RBS) file is always stored in the Config.Msi folder on the drive where the operating system is installed. The .RBF files are stored in the Config.Msi folder located on the drive where the application that is being backed up currently resides. This is done so that there is no crossing of drives when backing up the application files. Files with a RBS file extension are rollback script files and files with a RBF file extension are backups of existing files. All rollback files and the Config.Msi folder are deleted when the installation completes successfully

The other entries are all associated with Combofix which you can now remove:

combofix cleanup.

Click START then RUN
Now type Combofix /u in the runbox and click OK ](case insensitive)
When shown the disclaimer, Select "2"

The above procedure will
Delete ComboFix and its associated files and folders.

Please go to the add/remove utility in the control panel anf uninstall

Java(TM) 6 Update 3

Please download the latest Sun java update (Update 4) from MajorGeeks: http://www.majorgeeks.com/Sun_Java_Runtime_Environment_d4648.html.

You also need to review your protections. I can see the following present:
Ad-Aware SE Professional
a-squared Free 3.1
AVG AntiSpyware
Trojan Remover 6.6.4
AVG AntiVirus
BT Yahoo! Internet\ModemLock.exe
BT Yahoo! Internet\Watchdog.exe
Spybot - Search & Destroy\TeaTimer.exe

What Firewall do you have?

Ideally you need one good third party firewall such as Comodo, one Anti-Virus, AVG is fine. You can have several anti-Spyware programmes on the hard drive as you want but make sure just one is running. I recommend installing the following as well:

Install Spywareblaster
SpywareBlaster doesn't scan and clean for so-called spyware, but prevents it from being installed in the first place. It blocks the popular spyware ActiveX controls, and also prevents the installation of any of them via a webpage.

MacAffee Site advisor.
http://www.siteadvisor.com/

Joe.

--------------------
If I have helped you in any way, please consider a donation:

Joe's WebSite.

Member of UNITE and ASAP.

Post Extras