Nikos' Config

[Malware Maniac]

If I had learn the situation right Nikos had infected his pc few days back while testing malware on host and he have Comodoon his system which unable to block the threat?
Am I right or not?

1. Nikos installed malware...
2. He ran combo fix...
3. He replaced services.exe
4. He was wanting to uninstall combo fix...
5. He was able to delete QooBox...
6. He also wanted to delete Program Data thinking it was no use on the system...
7. He deleted almost everything in ProgramData and found out it was critical on the system...

We gave him disclaimers and he didn't listen when he was not suppose to delete Program Data.

 

[Spirit]

Hmm,his machine is in trouble.
The best idea is to format and reinstall when all things fail(I know its painfull).

I want one confirmation from Nikos or other member that while testing malware which av was installed on his system?

 

[Malware Maniac]

Hmm,his machine is in trouble.
The best idea is to format and reinstall when all things fail(I know its painfull).

I want one confirmation from Nikos or other member that while testing malware which av was installed on his system?

This post says he had Comodo FW and Panda on his system. http://malwaretips.com/Thread-Nikos-Config?pid=65713#pid65713

 

[Plexx]

Hmm,his machine is in trouble.
The best idea is to format and reinstall when all things fail(I know its painfull).

I want one confirmation from Nikos or other member that while testing malware which av was installed on his system?

Hmm,his machine is in trouble.
The best idea is to format and reinstall when all things fail(I know its painfull).

I want one confirmation from Nikos or other member that while testing malware which av was installed on his system?

This post says he had Comodo FW and Panda on his system. http://malwaretips.com/Thread-Nikos-Config?pid=65713#pid65713

He didn't have an AV at the time.

Page one of the incident:
http://malwaretips.com/Thread-Malware-Ramnit-Brand-new-varient

CFW with D+ was what he was expecting to protect and where the issue started.

By the end of the few pages, it was still unclear if he was infected completely or not.

That is also the reason why I told him already several times to fully reinstall Wndows 7...

The incident that previously happened plus the constant add and remove of programs, drivers, services, plus the recent removal of 2 folders was simply a recipe for disaster. His system at the moment is nearly half recovered yet it is a ticking time bomb. Unfortunately, seems like I am speaking to a wall...

So perhaps someone translate the message to him.

 

[Deleted member 178]

He didn't listen me when i said to keep CAV, he still want to avoid any AVs but doesn't know how to efficiently run a system without them, then he ran the 0-day malware with CFW on stock setting, it is clear now doesn't have the skills to set it up properly or interpreting the potential popups, then he seems to be infected, ran combofix...then we know the following events...

Even me i never ran a malware or suspicious apps on my real system even with my combo unless under shadow mode.

 

[Nikos]

Hi folks! Sorry for not interfering with the discussion sop far as iam currently on vacation and i will be for 10 more days in Chalkidiki, Greece.

Iam on a beach bar at the moment with my laptop and saw my mails and forum notifications.

Although i act foolishly the last days i was also lucky as i wasnt infected with the 0-day malware since it satted at shell that "Not enough memory to run on" thats why AV searches found my pc intact except the 2nd time i run combofix priot of un-installing it which found services.exe infected and resored the file.


Although i have deleted "ProgramData" folder because i was under the impression it was a leftover filder form combofix nothing wrong went on my pc except the missing of start menu shortcuts and reinstallation of babylon app.

My laptop is working fine, and why shouldnt it? ProgramData is like %appdata% is a folder used to store setting for various applications and even if you delete it no harm will be done to the actuall applications just some seetings misses.