DOS.Generic_c.RQ Virus Issue

[Isalan]

Unfortunately yes, AVG is still complaining on start up, though the computer is running faster.

I may not have mentioned it in my original post but the file AVG points to is in my Windows/Sysytem folder. Theres a couple of random string folders involved, but the file ends UserData.bin.

Also, there is a more info option when AVG catches the virus, though following the page leads to AVG's knowledge base which contains no data on said virus. I've also done a google search for the virus, and the top answer is this thread, followed closely by a fairly shifty looking online virus scanner that I'm not going near for now.

Any of these details help?

Isa

[redcar92]

Greetings Isalan,

Please download Malwarebytes' Anti-Malware from Here.
Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.


Next
Please use Internet Explorer to download and run the following scan: Eset Online Scanner

• Place a check mark in the box YES, I accept the Terms Of Use
• Click the Start button.
• Now click the Install button.
• Click Start. The scanner engine will initialize and update.
• Do Not place a check mark in the box beside Remove found threats.
• Click the Scan button. The scan will now run, please be patient.
• When the scan finishes if there are any infections you will see a List of found threats.
• Click Export to text file
• Copy and paste the contents of the C:\Program Files\ESET\log.txt into your next reply.
• If no threats are found there will be no list, this is good, just tell me that no threats were found.

Logs to post:

• mbam.txt
• ESET report if available.

[Isalan]

Hey Bill,

Weirdly, on start-up this morning, AVG didn't have complain about anything, which is strange cos I'm sure it was still flagging the virus when I turned it off before I went to bed last night.

In any case, I ran Mbam, and it found nothing. Here's the log:

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7283

Windows 6.0.6000
Internet Explorer 7.0.6000.17037

26/07/2011 18:01:49
mbam-log-2011-07-26 (18-01-49).txt

Scan type: Quick scan
Objects scanned: 180280
Time elapsed: 7 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Am gonna run the Eset scanner as well, just as soon as I remember where I left Internet Explorer Will update in a little bit

Isa

[Isalan]

Update:

Ran ESET as requested in IE. It found 11 threats all of which appear to Java related. Attached the log for you to look over.

Thanks,

Isa

[Isalan]

Incidentally, after a reboot AVG is still complaining. I'm beginning to wander if the problem isn't with AVG in some way.

Isa

[redcar92]

Alright Isa

Let' fix Java.
To clear the Java Plug-in cache:
Click Start > Control Panel.
Double-click the Java icon in the control panel.
On the General tab, Click Settings under Temporary Internet Files.
On the Temporary Files Settings screen, Click Delete Files.
check all boxes
Click OK
Reboot the computer.

Next
Your Java appears to be down level.
Navigate to Control Panel then open on Programs and Features.
Highlight eachJava then click on Uninstall in tool bar.
Visit this site to down load and install the latest Java

Next
Download TFC to your desktop

• Close any open windows.
• Double click the TFC icon to run the program
• TFC will close all open programs itself in order to run,
• Click the Start button to begin the process.
• Allow TFC to run uninterrupted.
• The program should not take long to finish it's job
• Once its finished it should automatically reboot your machine,
• if it doesn't, manually reboot to ensure a complete clean

When done reboot your PC a couple of times and let's see if that pesky virus message is gone.

[Isalan]

Bill,

Good News!

3 fresh reboots and AVG hasn't thrown a hissy fit at all.

I do believe you've solved, bud.

Bearing in mind your still in training I can't wait to see what you can do with your full Jedi powers XD

Anything else need to be done, or can we stick a pin in this?

Regards,

Isalan

[redcar92]

Way to go Isa,
We are nearly done, please don't go yet.

[Isalan]

Still here bud, though its getting late over in my hemisphere so I might have to do the follow up stuff tomorrow sometime, just lemme know

Peace,

Isa

[redcar92]

Greetings Isalan,
No problem with when you run the tools, we have lots of time now.
Looking good now.

One more DDS to be sure.

1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")

Right click DDS.exe select Run as Administrator.
When done, two DDS.txt's may open.
Save both reports to your desktop.
Please include the contents of the following in your reply using Copy / Paste:
DDS.txt

P2P - I see you have P2P software UTorrent installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It likely contributed to your current situation. This page will give you further information.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
Please see this topic for more information:
Perils of P2P File Sharing.
I would strongly recommend that you uninstall this now. You can do so via Control Panel >> Add or Remove Programs.

Next
I see that you have IE7 on your pc. You may not use IE but your pc does when it does updates. I recommend updating to IE9 from here http://www.microsoft.com/download/en....aspx?id=16792

Next
Your Adobe appears to be down level
Please visit this site Click on the Adobe Reader icon on the right side and you will be presented with the correct Adobe for your system.
Down load and install this Adobe please.

Log to post

• DDS.txt