PDA

View Full Version : New Virus Problem



taffy1967
2010-04-15, 16:06
I don't know if I should be asking for advice here because after a full Spybot Search & Destroy scan nothing was found.

However this is the results I had after a Malwaybytes Anti-Malware scan: -


Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 3985

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904

13/04/2010 23:29:45
mbam-log-2010-04-13 (23-29-45).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|)
Objects scanned: 48174
Time elapsed: 19 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb (Worm.Waledac) -> Delete on reboot.


It doesn't delete the problem on reboot. In fact Windows initially blocks the programmme from starting up until I give permission and after another check the virus is still present and shows up the same.

But Spybot Search & Destroy still finds nothing.

Any advice would be greatly appreciated, because I don't know what to do.

:oops:

Cypher
2010-04-19, 18:20
Hi taffy1967.
Do you still need help?
Please post a HijackThis log and uninstall list.

Download HijackThis

Go Here (http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe) to download HijackThis Installer
Save HijackThis Installer to your desktop.
Double-click on the HijackThis Installer icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on Edit > Select All then click on Edit > Copy to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT use the AnalyseThis button its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Next.

Please post an Uninstall list.

Open HijackThis.
Click on the Open the Misc Tools section button.
Look under System tools.
Click on the Open Uninstall Manager... button.
Click on the Save list... button.
It will prompt you to save. Save this log in a convenient location. By default it's named uninstall_list.txt.
Notepad will open. Please post this log in your next reply.

Logs/Information to Post in your Next Reply


HijackThis log.
Uninstall list.
Please give me an update on your computers performance.

Cypher
2010-04-22, 18:38
This topic has been archived due to inactivity.

If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new HijackThis log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

Applies only to the original poster, anyone else with similar problems please start a new topic.