system
29
Hi Lee :),
I removed all restore.ins files on my computer (I think) and deleted the NetTool and PsKill registry key. But I don’t know if I am doing the right thing, because I don’t know if these registry keys are legitimate or not. I am afraid I’m going to remove something important and my computer will crash.
I looked for NetTool and PsKill on my computer but there were no files named like that on the computer itself (only wish it would be that easy to remove a virus). However, they did pop up in the registry under the search query ‘restore ins’ and as I said were deleted. But why does Microsoft Antivirus Toolkit still mention the virus if I have deleted all of the restore.ins files ? Virus still present?
Also when I look at my HijackThis Log there are 3 running processes of Internet Explorer open even I am offline while running Hijack This. What I wanted to know is: how many internet explorer processes should there be running normally? You said earlier that if there several running processes of Internet Explorer this is a result of the Trojan.Downloader Swizzor???
I’ll follow your earlier advice and use CrapCleaner, for now do you think I am still infected?
I have another (little) question for you if you don’t mind. Since I am a bit paranoid I downloaded a lot of software for protection of my computer. But maybe a few of them are redundant and interfere with other protection programmes. Could you please tell me which programme is unnessary?
I have the following programmes on my computer:
FREEWARE
Avast
BHODemon
Ad-Aware
A2 Free
Spybot
Crapcleaner
Spywareblaster (quite good so far)
SpywareGuard
Windows Beta Antispyware 1 ( Downloaded it yesterday. Good for protecting you from trojan.downloaders like Swizzor I read somewhere)
Sygate Personal Firewall
[b]
Shareware (free Trial) [/b]
The Cleaner and TDS, but these will be removed eventually.
I won’t remove Sygate, Avast, Spybot, Crapcleaner and Windows AntiSpyware and maybe Spywareblaster. What is your opinion?? 