fbdownloader problem

[SteveR]

Ok that's done as well. File named log is attached. On reboot windows looked for a device driver for an unnamed device. I cancelled it when the driver wasn't found. Didn't save Combofix anywhere, it just started running when the download ended. I presume that is OK as well.

 

[kuttus]

Okay. Are you trying to Open the Internet Explorer from your computer desktop or from c:\Program Files\Internet Explorer\iexplore.exe ? Open t from c:\Program Files\Internet Explorer\iexplore.exe and check which website you are getting as your home page

 

[SteveR]

It is still fbdownloader for the problem user profile. OK on others.

 

[kuttus]

Please run ADWCLEANER and CCleaner in the infected user profile...........

STEP 1: Clean your temporary files to gain more hard drive space and remove the junk files
<ol>
<li>Download Ccleaner from the below link:
CCLEANER DOWNLOAD LINK</a> <em>(This link will automatically download Ccleaner on your computer)</em></li>
<li>Install Ccleaner by following the prompts</li>
<li>Start Ccleaner and the following should be selected by default, if not, please select:
<img src="http://i52.tinypic.com/4l5a4i.png" alt="Posted Image" /></li>
<li>Click <img src="http://i56.tinypic.com/16jox2o.png" alt="Posted Image" /> and choose <img src="http://i40.tinypic.com/5x3nu8.gif" alt="Posted Image" /></li>
<li>Uncheck <img src="http://i51.tinypic.com/amuvj8.gif" alt="Posted Image" /></li>
<li>Then go back to <img src="http://i41.tinypic.com/2jb4qyb.gif" alt="Posted Image" /> and click <img src="http://i25.tinypic.com/nf47ev.gif" alt="Posted Image" /> to run it.</li>
<li>Exit CCleaner.</li>
</ol>

---

 

[SteveR]

Thanks, done both of these from the infected profile. CCleaner didn't seem to produce a log. The adw log is attached. Should I run IE from file location again?

 

[kuttus]

Thanks, done both of these from the infected profile. CCleaner didn't seem to produce a log. The adw log is attached. Should I run IE from file location again?

Sure. Run it now.... How it is working now?

 

[kuttus]

Please download Junkware Removal Tool to your desktop from here

• Turn off your antivirus software now to avoid potential conflicts
• Double-click to run the tool. For Windows Vista or 7 users, right-click the file and select Run as Administrator
• The tool will open and start scanning your system
• Please be patient as this can take a while to complete depending on your system's specifications
• On completion, a log (JRT.txt) will be saved to your desktop and will automatically open
• Post the contents of JRT.txt into your next reply

---

 

[SteveR]

The problem is still there in IE but it appears to have gone from Chrome now. Am struggling to download the JRT as both browser and anti-virus identify it as a threat and remove it prior to download.

 

[kuttus]

Change the Home page of Internet Explorer in infected user...

1. Start Internet Explorer.
2. On the Tools menu, click Internet Options.
3. Click the General tab.
4. In the Address box, type the Web page address that you want for your home page.
5. NOTE: If you want the page that you are currently viewing in Internet Explorer to be your home page, click Use Current.
   Click OK.

 

[SteveR]

I've done that - I've done it several times before and even reset it as well - but this time it seems to have done the trick. I also upgraded IE to version 9. I've rebooted and logged in again several times, searched, etc. and no sign of fbdownloader. Great. Ran adwcleaner in search mode and it came back clean as well. I will also completely uninstall Chrome and then get a new version of it too, just in case.

 

[kuttus]

Okay Cool...

Double click on OTL to run it

• Click on the Cleanup button at the top.
• You will be asked to reboot the machine to finish the Cleanup process. Choose Yes
• This will remove itself and other tools we may have used.

---

Now that your PC is clean, I recommend you to create a new System Restore point then purge the old ones after.

For XP
How to create a Restore Point in XP
Delete all restore points except the most recent one

For Vista
Create a restore point
Delete all but the most recent restore point

For Windows 7
Create a restore point
Delete all but the most recent restore point - Click the Delete all but the most recent restore point link

---

Keep your system updated

• Keeping your programs (especially Adobe and Java products) updated is essential. Update Checker will notify you if any of your programs require an update.
• Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office product bugs and vulnerabilities.
• Please ensure you update your system regularly and have automatic updates on. You can learn how to turn Automatic Updates on here

---

I also recommend you to switch your antivirus program to a better one. Here are some suggestions:

• avast! 7 Home Edition - Don't use it with Online Armor
• Avira AntiVir Personal
• Microsoft Security Essentials

In addition to your antivirus, you need additional protection such as a firewall and behavioural blocker.

• Online Armor
• Comodo Firewall - If you are an advance user

Here are only a few suggestions that will improve your system security. Should you wish to allow us to make full recommendations and set your PC up with maximum security, please start a thread here. Our community of PC enthusiasts and experts will give you feedback and help you secure your system from future malware infections.

---

Internet Explorer may be the most popular browser but it's definitely not the most secure browser. Consider using other browsers with addition add-ons to safeguard your system while browsing the internet.

Firefox is a more secure, faster browser than Internet Explorer. Firefox contains less vulnerabilities, reducing the risk of drive-by downloads. In addition, you can add the following add-ons to increase security.

• KeyScramber - Encrypts your keystrokes to protect you against keyloggers that steals personal & banking information
• AdBlock - Disable/blocks advertisements on websites so you won't accidentally click on a malicious ad.
• NoScript - Disables Flash & Java contents to avoid exploits or drive-by attacks
• Web of Trust - Shows the website rating by other users and blocks dangerous and poor-rated sites

Google Chrome is another good browser that is faster and more secure than Internet Explorer by having a sandbox feature. Additionally, you can add the following add-on to Chrome to heighten security.

• AdBlock

---

Lastly, it is important to perform system maintenance on a regular basis. Here are a few tools and on-demand scanners that you should keep & use every 1-2 weeks to keep your system healthy.

• CCleaner
• Malwarebytes Anti-Malware
• Temp File Cleaner by OldTimer

Other than that, stay safe out there! If you have any other questions or concerns, feel free to ask

<hr />
What's next?

1. Bulild up your malware defenses by starting a new thread in Security Configuration Wizard forum.
2. Learn how to avoid malware by reading this article <a href="http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/">How to easily avoid malware</a>
3. Be an active member in the MalwareTips community!

 

[kuttus]

This thread is now closed.​

Reason:&nbsp;<span style="color: #ff0000;">Issue Resolved</span>​

<span style="color: #ff0000;"><>The procedures contained in this thread are for this user and this user only.&nbsp;&nbsp;Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair.&nbsp;&nbsp;</></span>

<span style="color: #ff0000;"><>DO NOT use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.</></span>

All members requesting Malware Removal Assistance are required to follow all procedures in the thread

My virus removal help is always free. Should you wish to show your appreciation via a donation, it will be much appreciated.​