Spyware activity found on my computer

[kumar]

Hi,

My system is infected with spyware and every time i am getting pop ups saying, "Your privacy setting are compromised. It is highly recommended to install antispyware solutions." If i click that mesage , i getting download file name called, raptodefence_setup.exe.

My desktop background wall paper also changed.

I need help for this problem.

Regards,

Kumar

[Rene-gad]

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore
-Fix

R3 - URLSearchHook: (no name) - {12F02779-6D88-4958-8AD3-83C12D86ADC7} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\oembios.exe,

- Execute following script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelCLSID('{5EB96953-7D02-4594-AC15-F55FC9AACFCB}');
 QuarantineFile('C:\WINDOWS\system32\oembios.exe','');
 QuarantineFile('C:\WINDOWS\system32\mscont32.dll','');
 DeleteFile('C:\WINDOWS\system32\mscont32.dll');
 DeleteFile('C:\WINDOWS\system32\oembios.exe');
BC_ImportAll;
ExecuteSysClean;
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine over the link Upload quarantined files on the top of this page.
- Attach 3 logs to your new post..

[kumar]

Logfiles

[Rene-gad]

It's not allowed to open 2 topics!!! Please stay here!!!

YOU MUST SWITCH YOUR ANTIVIRUS OFF!!! IST IT NOT CLEAR?


- Execute following script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelCLSID('{5EB96953-7D02-4594-AC15-F55FC9AACFCB}');
  QuarantineFile('C:\WINDOWS\system32\mscont32.dll','');
 DeleteFile('C:\WINDOWS\system32\mscont32.dll');
BC_ImportAll;
ExecuteSysClean;
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine over the link Upload quarantined files on the top of this page.
- Attach 3 logs to your new post..