Would like to do a full preventative malware/trojan check

[shawnh]

Hi Starbuck, I just tried to delete that WINDOWS folder from Windows Explorer... it came up with the normal "Deleting..." window briefly, but then the window disappeared. It doesn't look like anything got deleted.

 

 

RandyL - but I already have my functional Windows XP in the folder C:\WINXP. Still, you think it's dangerous though?

 

Thanks

Shawn

[Starbuck]

Hi shawn,

 

it came up with the normal "Deleting..." window briefly, but then the window disappeared. It doesn't look like anything got deleted.

Have you tried just deleting the contents of the folder?

If it contains the old installation, the files may actually be protected.

[shawnh]

Didn't try that, as there's about 40 subfolders and I hoped to get them all with one fell swoop. I'll try deleting them individually and see how that goes then.

 

If the files are protected, is there a way to un-protect them?

 

Thanks

Shawn

[RandyL]

Shawn follow Starbucks advice. Your in good hands.

[Starbuck]

If the files are protected, is there a way to un-protect them?

Some system files are normally protected, to stop them from being removed.

But if you have problems, there may be a way. :)

[shawnh]

ah cripes, now I got a new problem to worry about on this same laptop - this IKW.EXE virus has appeared. It poses as a Windows XP antivirus thing and shows a window doing a fake "scan". I deleted the running ikw.exe file from my task manager, but it's making it difficult to launch any programs now - a window will come up saying "what program do you wish to run to launch this program...", and show the choice of programs or "Browse". I tried to launch Malwarebytes and this window came up so I browsed to my malwarebytes folder and chose the mbam.exe file. Luckily, I can run it and am doing so now. Hope it can find it and clean it out.

 

Should Malwarebytes clean it up for me, or do you have any other suggestions Starbuck? Sorry to throw this at you too - there's always something eh. I make one step forward, then another back.

 

Thanks

Shawn

 

P.S: I'm on my other PC right now writing this.

[Starbuck]

Hi shawnh

 

Yes, MBAM should be able to clean that.

If not, let me know and i'll post further instructions for you.

 

Edit:

I just remembered you still have Combofix on your system.

If MBAM doesn't clean it, run CF ( update it if asked)

[shawnh]

OK, MBAM seems to have fixed it, phew. I'm gonna run TrendMicro HouseCall tonight, the do another backup, then try deleting that old Windows directory - folder by folder.

 

Thanks!

Shawn

[Starbuck]

Hi shawnh

 

Ok, let me know how it goes.