Spyware? Help!

[mepanick]

The free one should work right? (MBAM)

[leofelix]

yes, MalwareBytes antimalware installer is the same for the Paid version

[mepanick]

alright. Running the scan now.. taking much more time than hijack.. hmm..

---------- Post added at 09:32 PM ---------- Previous post was at 09:26 PM ----------

OH NO!!

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5013

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

11/1/2010 9:32:20 PM
mbam-log-2010-11-01 (21-32-20).txt

Scan type: Quick scan
Objects scanned: 155151
Time elapsed: 8 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28abc5c0-4fcb-11cf-aax5-81cx1c635612} (Generic.Bot.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_Windows_RECYCLED_Services (Worm.AutoRun) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Windows Recycled Services (Worm.AutoRun) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[leofelix]

your system was still infected

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28abc5c0-4fcb-11cf-aax5-81cx1c635612} (Generic.Bot.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_Windows_RECYCLED_Services (Worm.AutoRun) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Windows Recycled Services (Worm.AutoRun) -> Quarantined and deleted successfully.

Absolute certainty doesn't exist

and since patience is a virtue, if you want to get more certainty your system that is clean I have to ask you to visit this webpage

http://www.superantispyware.com/portablescanner.html?tag=SAS_HOMEPAGE

Download SuperAntispyware portable to you desktop (freeware and stand alone = no installation required I mean), close your browser, doubleclick it then run a quick scan.

Since it is likely your external USB devices are infected as well, you'd better to disable autorun.
For such a purpose I suggest you to use Panda USB Vaccine (freeware)

http://research.pandasecurity.com/panda-usb-vaccine-version-1-0-1-4/

Then scan your external USB devices as well with your antivirus.

[mepanick]

I just cleaned and rebooted.

This is my new hijack this log..
http://paste2.org/p/1066596

[leofelix]

you have a lot of useless start up entries

download StartUpLite (freeware)

http://www.malwarebytes.org/startuplite.php

StartUpLite

A problem in the computer world that many users have is a slow startup. Everyone wants to know how to speed up their startup process. Of course, there are many solutions to this problem, however, Malwarebytes has created a safe, easy, and efficient way to eliminate these unnecessary applications that start when you turn on your computer - StartUpLite.

StartUpLite is a lightweight and simple to use application that allows you to speed up your system startup, safely and efficiently. The program allows you to disable or remove unnecessary startup entries from your computer. By using StartUpLite, you can dramatically help shorten your startup time with only a few clicks of the mouse.
Usage

Simply download StartUpLite from the link below and save it to a convenient location. Double click StartUpLite.exe. Select all options you would like executed and select continue.

Use it.

Please read my previous post as well and if you take care of your system security follow my advices

thanks

[mepanick]

Hmm.. USing that app.. it shows me 6 entries which i always use..:x
Thanks for your help! sure thing will keep them running in my laptop

[leofelix]

well if you like to get a slow system, it is not a problem for me.

Thread closed