Malware will not remove or detect Mal Hifrm

[Sey12]

I have been infected for months by a virus called Mal Hifrm and the infected file is: C:\...\i[1].htm

My anti-virus program (TREND) detects it near daily but says it cannot quarantee or remove it. Malware was recommended as the source to remove it, so I've downloaded and run MalWarebytes many time with no results. The results show my computer is clean, but I know that is not the case. I am using Windows Vista.

Any suggestions on how to get rid of Mal Hifrm?

Thanks-

Suzanne

[Dakeyras]

Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.

Hi Suzanne and welcome to the Malwarebytes Forum

I'm Dakeyras and I am going to try to assist you with your problem. Please take note of the below:

• I will start working on your Malware issues, this may or may not, solve other issues you have with your machine.

• The fixes are specific to your problem and should only be used for this issue on this machine!.

• The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.

• If you don't know, stop and ask! Don't keep going on.

• Please reply to this thread. Do not start a new topic.

• Refrain from running self fixes as this will hinder the malware removal process.

• It may prove beneficial if you print of the following instructions or save them to notepad as I post them.

• Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.

Vista Advice:

All applications I ask to be used will require to be run in Administrator mode. IE: Right click on and select Run as Administrator.

The Operating System(Vista aka Windows 6) in use comes with a inbuilt utility called User Access Control(UAC) when prompted by this with anything I ask you to do carry out please select the option Allow.

Next:

Please read the below topic:

I'm infected - What do I do now?

All I require is you download and install HijackThis nothing else OK. Then after you have installed HijackThis please carry out my instructions below, thank you.

• Friendly HijackThis advice:

• DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.

• DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Scan with Rooter:

Please download Rooter.exe to your desktop.

• Right click on Rooter.exe and select Run as Administrator to start the application.

• Now click on the Scan button.

• When the scan is completed a text file called Rooter.txt will appear on your desktop, post the contents in your next reply.

• Now click on Close button to exit Rooter.

Scan with RSIT:

• Please download Random's System Information Tool by random/random from here and save it to your desktop.

Make sure that RSIT.exe is on the your Desktop before running the application!

• Right click on RSIT.exe and select Run as Administrator to start RSIT.

• Click Continue at the disclaimer screen.

• Once it has finished, two logs will open:
  • log.txt will be opened maximized.

  • info.txt will be opened minimized.

  [*]Please post the contents of both log.txt and info.txt.

When completed the above, please post back the following in the order asked for:

• How is you computer performing now, any further symptoms and or problems encountered?

• Rooter Log.

• Both RSIT logs. <-- Post them individually please, IE: one Log per post/reply.

[Dakeyras]

Hi

Do you still need help with your machine?

If the instructions are unclear or something isn't working, please let me know before proceeding.

[Sey12]

Hi

Do you still need help with your machine?

If the instructions are unclear or something isn't working, please let me know before proceeding.

Hi - Thanks for taking the time to help me out. I haven't tried your suggestions yet. I took one look at them and decided to wait until I had more time available. I am not very good with computers, so the instructions looked a bit tedious and complicated to me. Plus, I am a little bit confused. You said: "All I require is you download and install HijackThis..." What is "HijackThis" and where do I find it in order to download it? I warned you I'm not very good, lol.

Suzanne

[Dakeyras]

Hi Suzanne

OK I have taken into account all you have mentioned. If you think it tedious, put it in this respective I do need to have your good self perform some benign initial scans so I am able to ascertain the correct course of action to rid your computer of malware(if present). The whole process could very will be protracted as we will be doing this online and several major factors:

1:- I do not have physical access to your computer.

2:- We both abide in different time zones.

3:- Contrary to popular belief I actually do not have a magic wand that can fix all <-- A wee bit of levity on my behalf

For now just do your best to carry out the below and nothing else. I am a extremely patient man and if need be we can do everything one step at a time as I do not mind in the least OK.

Vista Advice:

All applications I ask to be used will require to be run in Administrator mode. IE: Right click on and select Run as Administrator.

The Operating System(Vista aka Windows 6) in use comes with a inbuilt utility called User Access Control(UAC) when prompted by this with anything I ask you to do carry out please select the option Allow.

Next:

Please download HijackThis from here.

• Choose the default location of C:\Program Files\Trend Micro\HijackThis as the destination. HJT needs to be in its own folder so that the program itself isn't deleted by accident. Having the backups could be VITAL to restoring your system if something went wrong in the FIX process!
  
• Click the Install button.
  
• Accept the license agreement .
  
• The progam will place a shortcut on your desktop. This will make it easier for you to access the tool when required.
  
• Click Do a system scan and save a log file. A Notepad file will open.
  
• To post the text, first you must highlight the entire text and then press the (Ctrl+C) keys which copies it to your clipboard.
  
• Now paste the log into this thread using the (Ctrl + V) buttons.
  
• DO NOT use the AnalyzeThis button, its findings are dangerous if misinterpreted.
  
• DO NOT have Hijackthis fix anything yet.
  

When completed the above, please post back the following in the order asked for:

• How is you computer performing now? Any problems encountered and or further symptoms?
  
• A HijackThis Log.
  

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.