Let’s procede withe the tool clean up, we can always get them again if needed. I’ll post it again and you can do what’s left. I find out how to remove AVZ.
We’ll try it for awhile. Can you recall what was the last thing we did before the virus alerts stopped?
Looks like we are done.
Just a few loose ends to clean up.
If you have sent that file from the chest to avast, you can open the chest, click the users section button, right click on the file, click delete. If you haven’t sent it yet, please do so now.
Click start button, run, then copy and paste the following line into the box and click ok.
ComboFix /u
Open OTMoveIt, then click the Clean Up button. You may get prompted by your firewall that OTMoveIt wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will delete all the tools you have downloaded plus itself.
Make a new clean restore point
To clear existing restore points
1.Click Start, click All Programs, click Accessories, click System Tools, and then click System Restore.
2.Click to add a check mark beside Turn off System Restore on all Drives, and click Apply.
- When you are warned that all existing Restore Points will be deleted, click Yes to continue.
All system restore points are deleted. Now you should manually create a restore point.
1.Click Start, click All Programs, click Accessories, click System Tools, and then click System Restore.
2.Click Create a Restore Point, and then click Next.
3.Name your restore point. (use the date as well as a descriptive term such as “After Restore Point Deletion.”) click create, click close.
Your java is out of date
Open an Internet Explorer (only) window and go to http://www.java.com/en/download/manual.jsp > In the middle of the page, click on the Download button to the right of Java Runtime Environment (JRE) 6u3 > If Information Bar pop-ups up, right-click on it and say it’s OK to display the blocked content.
You do not have to install the Java Web Start ActiveX Control
Accept the license agreement > Click on Windows (XP,Vista, .etc) Offline Installation, Multi-language and Save the file jre-6u3-windows-i586-p.exe to your desktop; do not Run it.
When the download is complete, close all browser windows and double-click on the saved file to install the update.
Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.
Open Control Panel > Add/Remove Programs:
Uninstall anything that says Sun Java, Java JRE, or similar except Java TM 6 Update 3 which you just installed.
Close Add/Remove Programs.
In Windows Explorer, navigate to C:\Program Files\Java <=this folder, if found. Delete any subfolders except the subfolder jre1.6.0_03 which was just created by the installation above.
Do NOT delete C:\Program Files\JavaVM <=this folder, if found!
I didn’t see a third party firewall installed, you may want to check this thread for a good free 3rd party firewall which will provide outbound monitoring as well as inbound.
http://forum.avast.com/index.php?topic=30808.0
Keep ERUNT, cleanup and SAS. Use cleanup and SAS regularly to help keep the bad guys out, just make sure SAS is updated and do a complete scan.
