TheSentinel Posted September 24, 2009 ID:132708 Share Posted September 24, 2009 Hello, I was on the web earlier and picked up this virus. I've rebooted three times. There's a red circle and x in my toolbar. Everytime it's quaranted, it needs to restart. Then after the restart, the circle pops up saying "Windows has detected spyware infection! It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you." When I click it doesn't do anything. The current scan is up to 7 objects. Here's the list from last scaMalwarebytes' Anti-Malware 1.33Database version: 1732Windows 5.1.2600 Service Pack 39/24/2009 4:47:25 PMmbam-log-2009-09-24 (16-47-25).txtScan type: Quick ScanObjects scanned: 57866Time elapsed: 38 minute(s), 50 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 2Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost (Backdoor.Bot) -> Quarantined and deleted successfully.Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\Documents and Settings\Son of Duh\Application Data\svcst.exe (Backdoor.Bot) -> Delete on reboot.C:\WINDOWS\SYSTEM32\~.exe (Trojan.Downloader) -> Quarantined and deleted successfully.n. Please help! Update: Before starting a full scan, I updated MBAM. Link to post Share on other sites More sharing options...
Staff miekiemoes Posted September 29, 2009 Staff ID:135163 Share Posted September 29, 2009 Hi,scaMalwarebytes' Anti-Malware 1.33Database version: 1732Windows 5.1.2600 Service Pack 3First of all, please update MalwareBytes, because the version is almost 10 versions behind and databaseversion is like more than 1000 versions outdated.Start MalwareBytes and click the Update tab. There click "Check for updates"Once the updates are downloaded, perform a quick scan again.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply along with a fresh HijackThis log, then we'll proceed from there with new steps.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 8, 2009 Root Admin ID:139617 Share Posted October 8, 2009 Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you. Link to post Share on other sites More sharing options...
Recommended Posts