Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Virus keeps coming back?  (Read 1775 times)

0 Members and 1 Guest are viewing this topic.


    Topic Starter


  • I have no personalized text. Oh, wait...
    Virus keeps coming back?
    « on: March 07, 2010, 08:41:41 AM »
    Hello, a few weeks ago I had alerts from ThreatFire saying that "c:\2F2FE1D9C8463A4E6C7466B1CF9E03AD\MPSIGSTUB.EXE"
    was trying to modify another program, copy itself to multiple locations, I clicked ignore to these after looking it up, and finding out that mpsigstub.exe was related to windows malicious software remover. When I  tried to look inside the folders, they renamed themselves. I started to panic when I found out that its normally in the system32 folder, so my friend came round to help me delete it and remove the registry changes it had made. I know that was a virus, but I'm not sure about these:

    Not so long ago a very similar directory had been created again, this time with stub.exe in it. I deleted them, and ran an anti virus scan.
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report09186521\WER11A7.tmp.hdmp and C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report11188777 were infected and quarantined . stub.exe was also trying to modify other programs etc.
    Just today I found two more directories with similar names, such as 70d953ce1268e4d3b8, with eventlog.txt in them. I haven't got any warnings as far as I know, so I want to know if this is the same virus, or even if its actually a virus at all, and I'm just being paranoid.

    Thanks in advance 

    PS. I also had a process called conime.exe, I looked it up, and its to do with using an Asian language. Apparently, if this is running while you aren't using an Asian language, it could be a backdoor. Is this true? Sorry, I'm a bit over anxious after having had Magistr.b not long ago.