Audio Malware

[Stillgrave]

I am unable to run an install of Spybot S&D on this computer since a malware infection. It affected both my AVG and my spybot as well as windows defenders. I am working with windows 32 bit vista. I have been getting audio clips since I successfully removed a win32 variant on this computer. However, each time I try to reinstall spybot or AVG my computer does a forced memory dump. I have tried several other removal tools from adaware (which did catch the original virus infection program) upto and including bazooka. Neither find anything wrong now. However, I did find out by closing different processes when the audio clips where playing, that if I closed Iexplorer.exe in the task manager, the audio clip stopped immediately. Unfortunately Iexplorer.exe will reinstate itself in the taskmanager within a few seconds.

 

[Blade81]

Hello,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.

• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt
• Save both reports to your desktop. Post the contents of logs back to your topic.

Download GMER here by clicking download exe -button and then saving it your desktop:

• Double-click .exe that you downloaded
• Click rootkit-tab and then scan.
• Don't check
  Show All
  box while scanning in progress!
• When scanning is ready, click Copy.
• This copies log to clipboard
• Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

 

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.