Trojan.SHarpro

[mdefilip]

Hello I just started noticing some google redirects to sites like infomash.org and new something was up. I ran malwarebytes, found some malicious items, and here is my log:

Malwarebytes' Anti-Malware 1.51.2.1300

www.malwarebytes.org

Database version: 911122308

Windows 6.1.7601 Service Pack 1

Internet Explorer 9.0.8112.16421

12/23/2011 2:13:29 PM

mbam-log-2011-12-23 (14-13-29).txt

Scan type: Quick scan

Objects scanned: 210997

Time elapsed: 14 minute(s), 27 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 3

Registry Keys Infected: 1

Registry Values Infected: 3

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 6

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

c:\Users\matt&julie\AppData\Local\apple computer\appleupdate\appleupdt32.dll (Trojan.SHarpro) -> Delete on reboot.

c:\programdata\googleverifierverifier.dll (Trojan.SHarpro.PGen) -> Delete on reboot.

c:\Users\matt&julie\AppData\Local\apple computer\appledata\appledata.dll (Trojan.SHarpro.PGen) -> Delete on reboot.

Registry Keys Infected:

HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Mozilla (Trojan.SHarpro) -> Value: Mozilla -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleVerifierVerifier (Trojan.SHarpro.PGen) -> Value: GoogleVerifierVerifier -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AppleData (Trojan.SHarpro.PGen) -> Value: AppleData -> Quarantined and deleted successfully.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Users\matt&julie\AppData\Local\Temp\icreinstall\cnet2_pazera_free_mp4_to_avi_converter_exe.exe (PUP.Adware.Downloader) -> Quarantined and deleted successfully.

c:\Users\matt&julie\downloads\cnet2_pazera_free_mp4_to_avi_converter_exe.exe (PUP.Adware.Downloader) -> Quarantined and deleted successfully.

c:\Users\matt&julie\local settings\application data\apple computer\appleupdate\appleupdt32.dll (Trojan.SHarpro) -> Quarantined and deleted successfully.

c:\Users\matt&julie\AppData\Local\apple computer\appleupdate\appleupdt32.dll (Trojan.SHarpro) -> Quarantined and deleted successfully.

c:\programdata\googleverifierverifier.dll (Trojan.SHarpro.PGen) -> Quarantined and deleted successfully.

c:\Users\matt&julie\AppData\Local\apple computer\appledata\appledata.dll (Trojan.SHarpro.PGen) -> Quarantined and deleted successfully.

[Maurice Naggar]

Hello mdefilip,

Would you advise if you have resolved your issues or if you have sought help elsewhere?

If not resolved and you are not already seeking help elsewhere, I'd like for you to rerun a new (fresh) DDS and Copy & Paste the DDS.txt into a new reply into this Topic.

Read and follow the directions >> here << , skipping any steps you are unable to complete.

Anyone other than original-poster who has similar issues, do not reply here. Start your own topic.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!