Computer Hope
Software => Computer viruses and spyware => Topic started by: alextienda on March 28, 2009, 12:29:58 PM
-
Hi, sorry, If you dont mind, I have the exact same problem and I followed your instructions, the report I get is this...
autorun.inf;c:;Probably Win32.HLLW.Autoruner.corrupted;Moved.;
iexplore.exe;c:\windows;Trojan.Inject.3239;Deleted.;
autorun.inf;g:\;Win32.HLLW.Autoruner.2032;Deleted.;
autorunme.exe;g:\recycler\s-1-6-21-2434476501-1644491937-600003330-1213;Trojan.Inject.3239;Deleted.;
dlmF7.tmp\NN_Bar77_876986.dll;C:\Documents and Settings\X\Local Settings\Temp\dlmF7.tmp;Adware.Mirarbar.40;;
dlmF7.tmp;C:\Documents and Settings\X\Local Settings\Temp;Archive contains infected objects;Moved.;
Mirar_V77_LOG_IESC_AFF_ATD_TID_noMDNS_R PT_AVM_FLX_ADB_BHO_876986.exe\NN_Bar77_876986.dll;C:\Documents and Settings\X\Local Settings\Temp\Mirar_V77_LOG_IESC_AFF_ATD_TID_noMDNS_RPT_AVM_FLX_ADB_BHO_876986.exe;Adware.Mirarbar.40;;
Mirar_V77_LOG_IESC_AFF_ATD_TID_noMDNS_R PT_AVM_FLX_ADB_BHO_876986.exe;C:\Documents and Settings\X\Local Settings\Temp;Archive contains infected objects;Moved.;
mitF6.tmp/Mirar_V77_LOG_IESC_AFF_ATD_TID_noMDNS_RPT_AVM_FLX_ADB_BHO_876986.exe\NN_Bar77_876986.dll;C:\Documents and Settings\X\Local Settings\Temp\mitF6.tmp/Mirar_V77_LOG_IESC_AFF_ATD_TID_noMDNS_RPT_AVM_FLX_ADB_BHO_876986.exe;Adware.Mirarbar.40;;
Mirar_V77_LOG_IESC_AFF_ATD_TID_noMDNS_R PT_AVM_FLX_ADB_BHO_876986.exe;C:\Documents and Settings\X\Local Settings\Temp;Archive contains infected objects;;
mitF6.tmp;C:\Documents and Settings\X\Local Settings\Temp;Archive contains infected objects;Moved.;
caX1key.exe;C:\Documents and Settings\X\My Documents\Azureus Downloads\Chief Architect X1 11.5.4.17 Full Final + keygen\keygen;Trojan.Click.23331;Deleted.;
SetupSwishmax2_20090120.exe\data001;C:\Documents and Settings\X\My Documents\Azureus Downloads\SwishMax 2 Build 2009.01.20\SetupSwishmax2_20090120.exe;Trojan.Click.24698;;
SetupSwishmax2_20090120.exe;C:\Documents and Settings\X\My Documents\Azureus Downloads\SwishMax 2 Build 2009.01.20;Container contains infected objects;Moved.;
Dc340.dll;C:\RECYCLER\S-1-5-21-1177238915-413027322-839522115-1003;Trojan.Click.24698;Deleted.;
A0004780.exe;C:\System Volume Information\_restore{FB990AF1-CEE7-4C14-B2E2-3CE95C932F0F}\RP13;Trojan.Inject.3239;Deleted.;
A0006849.dll;C:\System Volume Information\_restore{FB990AF1-CEE7-4C14-B2E2-3CE95C932F0F}\RP14;Trojan.Click.24698;Deleted.;
A0006877.dll;C:\System Volume Information\_restore{FB990AF1-CEE7-4C14-B2E2-3CE95C932F0F}\RP14;Trojan.Click.24698;Deleted.;
Desktop_.ini;C:\WINDOWS\system32;Win32.HLLW.Gavir.ini;Deleted.;
vshost.exe;G:\;Win32.HLLW.Recycler.3;Deleted.;
caX1key.exe;G:\Chief Architect X1 11.5.4.17 Full Final + keygen\keygen;Trojan.Click.23331;Deleted.;
autorunme.exe;G:\RECYCLER;Win32.HLLW.Recycler.3;Deleted.;
usbv.exe;G:\RECYCLER;Win32.HLLW.Autoruner.4440;Deleted.;
winusb.exe;G:\RECYCLER;Trojan.Inject.5515;Deleted.;
If you could help me Id really appreciate.
Thanks
-
Welcome to Ch alextienda.
I moved this into a new topic.
Download Malwarebytes' Anti-Malware (MBAM) (http://www.besttechie.net/tools/mbam-setup.exe)
- Double-click mbam-setup.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to the following:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
- Then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select Perform quick scan, then click Scan.
- When the scan is complete, click OK, then Show Results to view the results.
- Be sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy and Paste the entire report in your next reply.
.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.