Jump to content

Source of virus/infection time?


fyfan
 Share

Recommended Posts

Good day, dear Forumeers!

I have a question for you and would be very happy if you could help me.

Some days ago my computer was infected by a virus (Trojan.Agent.BVXGen).

I want to know when exactly I got this virus.

Here is a log from Malwarebytes Anti-Malware in the day of infection.

2012/08/08 12:14:25 +0100 DETECTION C:\Users\Name\AppData\Local\Temp\derm32.exe Trojan.Agent.BVXGen QUARANTINE

2012/08/08 13:55:15 +0100 DETECTION C:\Users\Name\AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n Trojan.Agent.BVXGen QUARANTINE

2012/08/08 13:55:15 +0100 DETECTION C:\Users\Name\AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n Trojan.Agent.BVXGen DENY

and so on... and so on,... the last text continues through the day in vairous timepoints.

My question is following:

I received a .PNG file (image) at my MSN, and the creation of this file on my computer is 13:55:28..... Which makes me to be suspicious whether it is the source of the vius? Since the difference between this time and the time of second virus notification is only a few seconds.....

On the other hand, the first time this virus is visible in my program is much earlier (12:14:25), before I received the file..... The only thing that is strange that the first time the location is (C:\Users\Name\AppData\Local\Temp\derm32.exe)... but the other times the location is (C:\Users\Name\AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n)..... And the first time of this new location is very close to the time I received a PNG-file....

So my question is... Could the source of the virus be the PNG-file? Since the file creation time (acceptance) is very close to the time of the second virus notification........ Or was I infected much earlier, and the time of the second virus-notification is only a coincidence? In this case, why is the location of virus different this time?

I also wonder why the first time I got alert, the virus was in "AppData\Local\Temp\derm32.exe".

The second alert, the virus was in "AppData\Local\{aefc5b23-1b2a-033c-53ce-3c477fc66145}\n".

The first alert was hour prior I received the .PNG-file....

But the second alert was almost in the same minut I received the .PNG-file...(and virus alert was also in different location, than first alert)...

Is it only a coincidence? Or did I perhaps got infected 2 times by 2 different sources (first prior the .PNG, and second by the PNG)?

How likely do you think that I was infected by the PNG-picture?

Or did I got infected prior that, and then the virus just moved to other locations, and the time of second alert and receivement of PNG is only coincidence? (In this case, why did location of virus change?)

Thank you very much for your answers.

Link to post
Share on other sites

  • Staff

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.