Source of virus/infection time?

[fyfan]

Good day, dear Forumeers!

I have a question for you and would be very happy if you could help me.

Some days ago my computer was infected by a virus (Trojan.Agent.BVXGen).

I want to know when exactly I got this virus.

Here is a log from Malwarebytes Anti-Malware in the day of infection.

2012/08/08 12:14:25 +0100 DETECTION C:\Users\Name\AppData\Local\Temp\derm32.exe Trojan.Agent.BVXGen QUARANTINE

2012/08/08 13:55:15 +0100 DETECTION C:\Users\Name\AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n Trojan.Agent.BVXGen QUARANTINE

2012/08/08 13:55:15 +0100 DETECTION C:\Users\Name\AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n Trojan.Agent.BVXGen DENY

and so on... and so on,... the last text continues through the day in vairous timepoints.

My question is following:

I received a .PNG file (image) at my MSN, and the creation of this file on my computer is 13:55:28..... Which makes me to be suspicious whether it is the source of the vius? Since the difference between this time and the time of second virus notification is only a few seconds.....

On the other hand, the first time this virus is visible in my program is much earlier (12:14:25), before I received the file..... The only thing that is strange that the first time the location is (C:\Users\Name\AppData\Local\Temp\derm32.exe)... but the other times the location is (C:\Users\Name\AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n)..... And the first time of this new location is very close to the time I received a PNG-file....

So my question is... Could the source of the virus be the PNG-file? Since the file creation time (acceptance) is very close to the time of the second virus notification........ Or was I infected much earlier, and the time of the second virus-notification is only a coincidence? In this case, why is the location of virus different this time?

I also wonder why the first time I got alert, the virus was in "AppData\Local\Temp\derm32.exe".

The second alert, the virus was in "AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n".

The first alert was hour prior I received the .PNG-file....

But the second alert was almost in the same minut I received the .PNG-file...(and virus alert was also in different location, than first alert)...

Is it only a coincidence? Or did I perhaps got infected 2 times by 2 different sources (first prior the .PNG, and second by the PNG)?

How likely do you think that I was infected by the PNG-picture?

Or did I got infected prior that, and then the virus just moved to other locations, and the time of second alert and receivement of PNG is only coincidence? (In this case, why did location of virus change?)

Thank you very much for your answers.

[screen317]

Hi and welcome to Malwarebytes.

It's possible you were infected by a .exe file disguised as a .png file. If you upload it to virustotal.com, you can know for sure.

[Maurice Naggar]

@flyfan

Have you resolved your issue? Do you still need help?

Please reply within the next day or two, otherwise this thread will be closed.

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!