Trojan:JS/Medfos.B

[etavares]

Hello, Yockie.

Java will update itself, but sometimes malware blocks it. That is probably what happened here.

 

 

 

 

 

 

Step 1

 

 

 

 

Let's remove the AVG leftovers. Please download AVG Remover(32bit) 2013

(avg_remover_stf_x86_2013_2706.exe) and save it to your desktop.

 

 

Double-click it to run and follow the prompts. When it's complete, if it doesn't ask you to restart your computer, please restart it yourself.

 

 

 

 

 

 

 

 

 

 

 

 

Step 2

 

 

 

 

 

 

Uninstall ComboFix and Clean Up

Click Start > Run and type combofix /Uninstall click OK (Note the space between combofix and /Uninstall) See below:

http://i517.photobucket.com/albums/u338/Eextremeboy/CF_Uninstall-1.jpg

Please advise if this step is missed for any reason as it performs some important actions.

 

 

Download and Run OTC

 

 

We will now remove the tools we used during this fix using OTC.

• Download OTC by OldTimer and save it to your desktop.
  
• If that link doesn't work, try this one.
  
• Double click http://i517.photobucket.com/albums/u338/Eextremeboy/OTC_Icon.jpgicon to start the program. If you are using Vista, please right-click and choose run as administrator
  
• Then Click the big http://i517.photobucket.com/albums/u338/Eextremeboy/CleanUp.jpg button.
  
• You will get a prompt saying "Begin Cleanup Process". Please select Yes.
  
• Restart your computer when prompted.
  

 

 

 

 

 

 

Step 3

 

 

 

 

Next,you can uninstall ESET Online Scan from Add/Remove programs.

 

 

You can delete the AVG remover you saved to your desktop.

 

 

You can uninstall MBAM from Add/Remove Programs if you want. I recommend to keep the free version (you have the trial version installed). To do that, uninstall Malwarebytes' Anti-Malware. Download the free version from this link:

http://downloads.malwarebytes.org/mbam-download.php

 

 

And install it. It limits you to manual scans, but that's fine. Just update and run a scan every week or two for extra protection beyond MSE.

 

 

 

 

If you ran Defogger and disabled your emulator, please don't forget to run it again and reenable it. See the instructions here to do so.

 

 

 

 

Optional Items

 

 

Please take the time to read below to secure your machine and take the necessary steps to keep it that way.

 

 

 

 

 

 

 

 

Protect yourself from malicious sites

 

 

The HOSTS file can protect you from connecting to bad sites. See The Hosts File and what it can do for you for more background.

 

 

 

 

 

 

 

 

Keep Windows Up to Date

It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

 

 

 

 

 

 

Update your AntiVirus Software

 

 

It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out. If you use a commercial antivirus program you must make sure you keep renewing your subscription. Otherwise, once your subscription runs out, you may not be able to update the programs virus definitions.

 

 

 

 

Make sure your applications have all of their updates

 

 

It is also possible for other programs on your computer to have security vulnerability that can allow malware to infect you. Therefore, it is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.

 

 

 

 

 

 

 

 

 

 

 

 

Update all these programs regularly

Make sure you update all your programs regularly. Without regular updates you WILL NOT be protected when new malicious programs are released. You can use Secunia PSI to keep track of necessary updates. It can run in the background and constantly monitor your software; although I just run it once a week manually. It will alert you when an update is available for a variety of software. It is very useful.

 

 

Follow this list and your potential for being infected again will reduce dramatically.

 

 

Good luck!

 

 

etavares

[Yockie]

Hi etavares,

I did removed AVG leftovers, but then had to remove ESET before OTC, because OTC told me that it is unhappy with ESET and I have to rid of ESET first . All good in the end, only I’m not sure what to do with Malwarebytes – I don’t particularly like it or need it, should I just delete it?

In regards of the optional steps:

1. HOSTS thing I did not get AT ALL.

2. http://www.windowsupdate.com, there was Pack3 for Wind XP, I think I downloaded it, but can’t be sure. I did it ones pressing just RUN, and one SAVE first ( I am not always sure what am I doing on the PC...sorry...)

3. I do update my antivirus regularly (thank you)

4. Secunia – ran it few times, every time it gave me few suggestions for updates, I did download the updates, and when ran one more time for security – it showed the same as before I downloaded it! On the 1001^st go I gave up, but thank you anyway.

Thank you for all your help, very nice of you to do that.

[etavares]

Hi Yockie,

 

1. You can uninstall MBAM from Add/Remove Programs if you don't like it.
   
2. You can skip the HOSTS thing if you want...it's optional. The updated HOSTS file basically allows you to block websites or ad sites to further protect yourself, but it can also be a bit annoying at times.
   
3. You are already on Service Pack 3, so I'm not sure what the update was.
   
4. Secunia will update the status if the patch was applied. You downloaded the updates, did you install them?
   

 

-etavares