PDA

View Full Version : Help Please! virus @ globalroot\Device\__max++>\{Random String}.x86.dll



tricky
2009-09-09, 05:39
Hey guys,

I believe this virus is the same as this user if its any help:
http://forums.spybot.info/showthread.php?t=50602

The computer I am running is:
ASUS Notebook F3 Serise with Intel Core 2 CPU T7200 processor.
It runs on Windows Vista

The problem is this virus is impossible to detect as any of the infinite AV programs I have run (either from the computer, from USB or in safe mode) get their 'permissions' changed or the programs become locked and when a scan is run they just shut down.

The only AV scan that has found this is the online PandaSecurity ActiveScan 2.0 which found:
02578223 Generic Trojan Virus/Trojan Yes 0 No No globalroot\Device\__max++>\E78A25AE.x86.dll

It also says that this trojan is "Not disinfectable"

I have also tried on boot scans using "aVast" but these also produce no results.

Any assistance would be much much appreciated please :)

As my next resort is to wipe this computer and start over.

Thanks

Shaba
2009-09-11, 07:15
Hi tricky

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:
This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
If you need help to disable your protection programs see here. (http://www.bleepingcomputer.com/forums/topic114351.html)

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply along with a fresh HijackThis log.

Shaba
2009-09-18, 22:16
Due to the lack of feedback this Topic is closed.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

Everyone else please begin a New Topic.