Trojan.Dropper.BC.Miner Files Detected: 1

nickos2250 · June 9, 2012

Hi guys,

I've had this incedribly annoying problem for week now.

the symptom is that I hear sound of random ads playing in the background off and on, also my firewall is shut down and windows defender i think this has to do with my (BDE) being overrided I have used malwarebytes your wonderful program and it has detected a virus

(Trojan.Dropper.BC.Miner) Files Detected: 1

C:\Windows\Installer\{4dc3e749-1139-8c27-6465-ebe45b772472}\U\00000008.@ (Trojan.Dropper.BCMiner) -> Quarantined and deleted successfully.

JUMP TO LOCATION

Files relating: 80000064.@ 80000032.@ 80000000.@ 00000008.@ 00000004.@ 000000cb.@

however when i try to remove it and restart it comes right back every single time!

i am not sure how to create a new restore point but i have however taken recent files and put them on my flash drive also i already have the replacement "reg files" as follows Firewall-Repair-Windows-7, BFE-Repair-Windows-7, wscsvc and WinDefend, but have had troubles making them work.

I have run the DDS as i have seen it requested in another forum i thought it would help to make it easier

.

DDS (Ver_2011-08-26.01) - NTFSAMD64

Internet Explorer: 9.0.8112.16421

Run by a at 18:34:05 on 2012-06-09

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8183.3764 [GMT 10:00]

.

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\atieclxx.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files (x86)\Bonjour\mDNSResponder.exe

C:\Windows\system32\lxczcoms.exe

C:\Program Files\Microsoft LifeCam\MSCamS64.exe

C:\Windows\SysWOW64\PnkBstrA.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe

C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\System32\rundll32.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

C:\Program Files (x86)\Razer\Mamba\RazerTray.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Windows\explorer.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\SysWOW64\FlashPlayerApp.exe