Help needed in Trojan removal PLEASE!!!

Viruses and worms
1

Google searches being redirected to malicious sites I ran kaspersky online scanner after 2hrs 23 minutes it was finished and these are the results I got

not-a-virus:AdWare.Win32.SearchIt.t
[ virfeed ]
Malware detected 2008-07-10 Update released 2008-07-10

Trojan-Spy.Win32.Ardamax.cve
[ virfeed ]
Malware detected 2010-01-04 Update released 2010-01-05
Any help with these would be greatly appreciated.Im running Win XP SP3, Avast Home Edition Antivirus,Maleware Bytes,AVG (not installed though).

2

Try these

Hitman Pro 3 - Second Opinion Malware Scanner http://www.surfright.nl/en/hitmanpro
Norman Malware Cleaner http://www.norman.com/support/support_tools/58732/en
Dr.Web CureIt! http://www.freedrweb.com/cureit/?lng=en
How Do I Use Dr.Web CureIt!? http://www.freedrweb.com/cureit/how_it_works/

3

Ok I ran Hitman,removed 16 infected files,Then I ran Norman It deleted 3 more infected files and corrected proxy,Lastly I ran Freedrweb no virus found ,So does that mean Im clean. Is there a another virus online scan you’d like me to preform. If not would be able to advise me on some good tips for safe browsing or even a trusted site where I can receive some tips.

4

Check your computer for Malware with

Malwarebytes Antimalware http://filehippo.com/download_malwarebytes_anti_malware/
after install click UPDATE and run cuick scan, click on REMOVE SELECTED to quarantine anything found

SUPERAntiSpyware http://filehippo.com/download_superantispyware/
Are cookies really spyware and are they dangerous?
http://www.superantispyware.com/supportfaqdisplay.html?faq=26

If anything is found come back and post the scan logs here

If after rerun is showing clean and no trouble…i guess you are safe and clean… :wink:

5

Ok did as requested Ran Maleware bytes and got the following
Malwarebytes’ Anti-Malware 1.44
Database version: 3786
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

2/23/2010 6:10:23 PM
mbam-log-2010-02-23 (18-10-23).txt

Scan type: Full Scan (C:|D:|)
Objects scanned: 223655
Time elapsed: 43 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 5
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_USERS.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) → Quarantined and deleted successfully.
HKEY_USERS.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) → Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) → Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) → Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\1 (Security.Hijack) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\2 (Security.Hijack) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\3 (Security.Hijack) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\4 (Security.Hijack) → Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\uid (Malware.Trace) → Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
After which I ran Norman,Hitman,Avg,SuperSpyware,Dr.Web and Avast(My Antivirus software)and all came up clean There were also 3 tracking cookies but Maleware also took care of them.So what do ya think.