Jump to content

Not sure if infected or not (exploit.drop.3)


ermat_46
 Share

Recommended Posts

I just performed a Quick Scan using Malwarebytes on my Laptop (Windows Vista) earlier and it detects 3 exploit.drop.3 (all of them from C:\Users\User\AppData\Local\Temp/jna***************.tmp). They were quarantined and deleted by Malwarebytes. It prompted me for a reboot and re-scanned again. There were no detection anymore. The last scan I performed was on July 16, 2012 (using Quick Scan also) with no detections.

The weird thing is that I didn't noticed anything weird with my computer. I am also scanning (using Quick Scan) my computer using Microsoft Security Essentials. During those 12 days (July 16 - July 28), I rarely plugged in any USB Flash Drives, and if I do, I always scan them first using MSE (I only plugged 2 USB drives during that period, no detection. The other one is a External Drive that I never plugged in to any other laptop except mine). I don't know if Autorun was already disabled or not. I also did not visit any weird sites (just the normal sites that I am visiting) during that period. I also never installed any new software during that period. I didn't know how the malware entered my system.

Also, to make sure, I just did an Online Scan using ESET. It appears to be clean. Though, I am really bothered by that detection. Here's the log:

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org

Database version: v2012.07.28.04

Windows Vista Service Pack 2 x86 NTFS

Internet Explorer 9.0.8112.16421

RAMON T. ROLLAN :: KROPECK [administrator]

7/28/2012 8:06:57 PM

mbam-log-2012-07-28 (20-06-57).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 260598

Time elapsed: 14 minute(s), 41 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 3

C:\Users\User\AppData\Local\Temp\jna3065514954750137784.tmp (Exploit.Drop.3) -> Quarantined and deleted successfully.

C:\Users\User\AppData\Local\Temp\jna4591751311374616918.tmp (Exploit.Drop.3) -> Quarantined and deleted successfully.

C:\Users\User\AppData\Local\Temp\jna7205672708373316446.tmp (Exploit.Drop.3) -> Quarantined and deleted successfully.

(end)

=====================

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org

Database version: v2012.07.28.04

Windows Vista Service Pack 2 x86 NTFS

Internet Explorer 9.0.8112.16421

RAMON T. ROLLAN :: KROPECK [administrator]

7/28/2012 8:29:39 PM

mbam-log-2012-07-28 (20-29-39).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 260565

Time elapsed: 14 minute(s), 3 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

===============

My question is that is it possible that I am still infected? Thanks.

Link to post
Share on other sites

:welcome:

It sounds as if you might be infected.

We cannot work on malware removal in this section of the forums, so please read below for assistance with cleaning your system.

IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making it hard to recover your system.

PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:

OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum.

OPTION 2: For paid users of MBAM PRO, free, one-on-one, expert assistance from MBAM support.

OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.

OPTION 1:

  • Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  • If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.

  • Then please start a new post in the Malware Removal Forum.
  • When starting your new post, please note the following:
  • Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  • Please COPY/PASTE the requested logs into your post, rather than attaching them.
  • Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.

  • Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  • Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  • Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.

OPTION 2:

Alternatively, as a paying customer, you can contact the help desk by filling out the form here.

OPTION 3:

If you would like to use the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs – from installation and set-up to troubleshooting and tune-ups), please go to our Premium Support site here.

Please be patient – someone will assist you as soon as possible.

PS Please use theoeXUf.png button or the XA9Ey.png message pane (instead of the “Quote” and “MultiQuote” buttons) when replying here & at the other forums. That will make your topic easier to follow. :)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.