exile360

Good idea on returning PCTools and getting Malwarebytes'. You also won't have to pay renewal fees, the license for MBAM is lifetime. By the way, if you do ever need help with manual removal of malware that MBAM can't handle, just follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 One of our experts here will walk you through getting cleaned up, and they'll collect samples of the malware to add to MBAM's detections to save others the hassle of a manual removal in the future.

OK, you should be able to just boot from it and it should offer the option to install. But since you wiped the drive, make sure you select the option to install, not repair.

OK, is the Windows disc you're using a standard Windows installation disc or is it some type of Spartan branded "Recovery or Restore disc"?

Greetings, and welcome to the forum. Please check your settings in Internet Explorer and make sure it can connect to both malwarebytes.org and securitywonks.net. MBAM uses the same settings as IE, so if IE can connect and download files from here then MBAM should be able to also.

Yeah, most often if registering the .dll files manually doesn't fix it, then installing the VB6 runtime files does.

What type of PC is it (brand name, laptop, desktop etc)?

You're welcome. If you ever have such a problem again, you can reinstall the offending program (this will make sure all the files are there, including the uninstaller) and then uninstall it. Sometimes this happens when a program is removed incorrectly or an installation gets corrupted, but generally it's not a big deal. Good luck and safe surfing.

Hello, yes it's a False Positive.

Greetings. Please follow AdvancedSetup's instructions here to see if it helps: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If that works then please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Hello again. I'm not sure of the cause yet and need a bit more info. First off, what antivirus software do you have installed (all I saw listed were antispyware softwares)? Second, please download Microsoft Sysinternals Autoruns from here: http://live.sysinternals.com/autoruns.exe Save the file to your desktop and double click it to run it (if running Vista, save to your desktop, then right click the file and select "Run as administrator" then click Continue or Allow at the UAC prompt) Next, press the Esc key on your keyboard to halt the scan and click the Options button at the top. Select Hid Microsoft and Windows Entries as well as Verify Code Signatures from that menu. Then press the F5 key on your keyboard and the scan will start again, let it run until it says Ready in the lower left portion of the window. Once the scan completes, click the File menu and select Save. Save the file as Autoruns.arn (this is the default setting) and then zip the file with the Windows zip utility or Winrar if you have it installed. Attach the zipped file to your next post and I'll see if there's anything loading at boot that you can get rid of to speed things up without doing any harm.

Hello again, to use the rescue cd to disinfect the computer, please boot from it again and select option 1, then when it loads the main screen select english by clicking the British flag, then click the button on the upper left that says Configuration. Once in the configuration menu, select Try to repair infected files and under that select the check box that says Rename files, if they cannot be romoved?. Leave all other settings as they are and then click the Virus Scanner button on the upper left and click th button on the bottom that says Start scanner. Hopefully this will help (due to my lacking instructions, I don't think you had the cd set to remove what infections it found). Sorry about that, they recently changed the cd's menu structure and I hadn't familiarized myself with it. Let me know if it helps.

Greetings acconrad and welcome. Please follow AdvancedSetup's instructions here and see if it helps: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If so, then please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

So they're both alerting you to the same threat? That should be OK, just tell one to ignore the detection and the other to terminate/remove it and it should be fine. I believe Avira has an ignore option and I know MBAM does.

Greetings vheiss and welcome to the forum. To get you fixed up please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Posting in the above forum will ensure that one of the malware removal experts looks at your logs to help you get cleaned up Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Those are all the same ones I've got, and I've never had Shockwave 10 (I reformatted recently) so it looks like you got it cleared out. Also, another way to check (although, as I said, it looks clean) would be to use a tool like Secunia that checks the files on your system and lets you know if there are any outdated files or components for software. As far as the Add/Remove entry, you could just have Windows delete it (it should offer this option when it fails to find the uninstaller). By the way, a side note, I found info in a support article on Adobe's website stating that the uninstaller does in fact remove version 10 as well as 11, of course who knows if it's accurate, they might just think it does and each system is different.

Greetings and welcome to the forum. To get you fixed up please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

You are very welcome, and if you have any more questions/issues just let us know. And Happy Holidays.

Greetings Hannah. To get you the help you need please post your logs here: http://www.malwarebytes.org/forums/index.php?showforum=7 as this is the forum the experts frequent to analyze logs and do advanced repairs. Thanks. Good luck and safe surfing.

Yes, it's right up there with Abbott and Costello Meet the Wolfman and Godzilla VS Mothra

Greetings and welcome to the forum. If you see any more signs of infection or just want to be absolutely certain you're completely clean then please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Greetings Tesk. Not sure about whether the developers would join that site or not, but Malwarebytes does have it's own located here: http://uploads.malwarebytes.org/

Greetings and welcome. To get you fixed up please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Sure thing. 2 things to check, first, open IE and go to the Tools menu and click Manage Addons and look under Addons that have been used by Internet Explorer and if you see more than one entry for Shockwave, also navigat to C:\Windows\System32\Macromed (if it exists) and if 10 has any remnants that's where they'll be. Be aware that both locations also store the info about Flash Player, but reading what's there will tell you the difference (Flash Player is currently version 10 by the way).

Not an entirely bad idea, but keeping up with all the software vulnerabilities that might exist on any given system is a laborsome task and would drastically take away from MBAM keeping up with the latest malware. So unless they hire some more staff to focus just on vulnerabilities, it just doesn't sound realistic to me. All that being said, if you want a software designed to do exactly that, you could look into Secunia. They have an online scanner and an offline one as well (the offline one installs in your system tray and updates itself, monitoring software you install and checks for when vulnerabilities get patched then notifies you to install the updates).

You're very welcome, just sit tight and one of the experts will help you, just please be patient as they're all volunteers and it's been real busy lately due to the holiday (malware makers are super active this time of year due to jumps in online shopping, loads of credit card numbers flying through the net for them to try and grab).