Jump to content

Unremovable Viruses?


Recommended Posts

Good day mates!

 

I'm having a bit of a problem, I just recently installed MBAM and scanned, during my first scan it detected 6 infected files. I then closed all background programs running on my computer and then proceeded to remove and restart my computer. Being the the paranoid guy that I am, I decided to scan again just to make sure all the 6 were removed and to my surprise there were still 2 of the 6 detected so I proceeded to do what I did before again (close programs, remove, restart) and then again the 2 infected files aren't removed. I did repeated this for around 3-4 times until I got tired and decided to ask for support.

 

Here is a copy of my most recent scan log:

 

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.10.30.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: USER-PC [administrator]

Protection: Enabled

10/31/2013 7:22:11 AM
mbam-log-2013-10-31 (07-22-11).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 198372
Time elapsed: 2 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 2
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (PUM.UserWLoad) -> Data: C:\Users\User\LOCALS~1\Temp\msonqa.cmd -> Delete on reboot.
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Ransom) -> Data: C:\Users\User\LOCALS~1\Temp\msonqa.cmd -> Delete on reboot.

Registry Data Items Detected: 1
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Bot.RV) -> Bad: (C:\Users\User\LOCALS~1\Temp\msonqa.cmd) Good: () -> Delete on reboot.

Folders Detected: 0
(No malicious items detected)

Files Detected: 3
C:\Users\User\Local Settings\Temp\msonqa.cmd (Trojan.Bot.RV) -> Delete on reboot.
C:\Temp\TrustedInstaller.exe (Trojan.Agent.SML) -> Quarantined and deleted successfully.
C:\Users\User\AppData\Local\Temp\msonqa.cmd (Trojan.Bot.RV) -> Delete on reboot.

(end)
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

I hope you gentlemen would help me resolve this predicament of mine, and I hope MBAM will continue to grow as it was able to detect malware that my ESET Smart Security 5 was not able to.

 

Best Regards,

Allen

Link to post
Share on other sites

Hi, SomeRandomGuy: :)

 

Sorry you are having trouble getting rid of malware.

 

Some of today's stubborn infections require the use of multiple, different tools for complete removal.

I would suggest that you please follow the recommendations in this pinned topic: Available Assistance For Possibly Infected Computers.
A malware expert will guide you through the cleanup process.

Thanks,

daledoc1

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.