Jump to content

pup.bitminer redirects


Recommended Posts

As many others on these forums I have contracted the annoying and hard to get rid of pup.bitminer. I have tried Malwarebytes several times and it recognizes and get rid of the maleware but as soon as I start back up the pup is back. Any and all help to get rid of this pia malware would be greatly appreciated!

Thanks,

Ron

I saw directions on other posts so I followed the directions for ESET and below is the log from my scan done on 12/12/11. What's my next step? Thanks

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=db412ea7f8d3234490f6786adb15e8fa

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=false

# utc_time=2011-12-12 07:51:47

# local_time=2011-12-12 02:51:47 (-0500, Eastern Standard Time)

# country="United States"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=2560 16777215 100 0 0 0 0 0

# compatibility_mode=5892 16776574 66 56 0 160313134 0 0

# compatibility_mode=8192 67108863 100 0 0 0 0 0

# scanned=291270

# found=11

# cleaned=0

# scan_time=5078

C:\Users\Owner\AppData\Local\Temp\jar_cache1640809146496168725.tmp Win32/Agent.STT trojan F31A30568ED6D1C5EA7F04A6CC6C748F I

C:\Users\Owner\AppData\Local\Temp\jar_cache4020742143790142899.tmp Win32/Agent.STT trojan AF511A7EDF199AA68D2C873E709D061D I

C:\Users\Owner\AppData\Local\anuvarow.dll Win32/Adware.SpywareProtect2009 application 36998B8C71E2CACF07ED7BF868386858 I

C:\Users\Owner\AppData\Local\avicalolac.dll Win32/Adware.SpywareProtect2009 application 36998B8C71E2CACF07ED7BF868386858 I

C:\Users\Owner\AppData\Local\isiretubed.dll Win32/Adware.SpywareProtect2009 application 36998B8C71E2CACF07ED7BF868386858 I

C:\Users\Owner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\35630f4b-4ff2df4f a variant of Win32/Kryptik.XAD trojan AD0C57C350668FBEE7F3DCBECD3C9F04 I

C:\Users\Owner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\3cc664c-33737d1f Java/Exploit.CVE-2010-4452.A trojan 99F1F6E77EA18DC16FF4C6D2D703182D I

C:\Windows\System32\FastUserSwitchingCompatibilityex.dll a variant of Win32/Routmo.N trojan 7B0A5919556147925EE9AA3F2124D7AC I

C:\Windows\system64\consrv.dll Win64/Sirefef.E trojan 63E99B675A1337DB6D8430195EA3EFD2 I

C:\Windows\SysWOW64\FastUserSwitchingCompatibilityex.dll a variant of Win32/Routmo.N trojan 7B0A5919556147925EE9AA3F2124D7AC I

C:\Windows\svcs.exe probably a variant of Win32/Spy.KeyLogger.LFJNMOG trojan 1214CFC194041BF48A8746D5C7F85161 I

esets_scanner_update returned -1 esets_gle=53251

Link to post
Share on other sites

  • 2 weeks later...
  • 1 month later...

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.