My turn Antivirus XP 2010

[apperget]

I have gotten the AV XP 2010 thing on my laptop. After almost 20 years, I have my first virus. Amazing. Anyway, ran Norton. It did nothing. Downloaded and purchased Malwarebytes and ran it twice. I didn't save a log so can't share it, but the bottom line is it didn't "find" the Antivirus XP 2010. I checked the registry and saw none of the items that are mentioned on bleepingcomputer.com, which is where I learned about Malwarebytes. I'd like to get this cleared off my computer and am willing to start at the word 'go' if someone is able to help me out.

Ideas? Let me know what I need to do on my end and I'll gladly do it. I will check back in the morning. I'm pretty frustrated fighting this thing today. Thanks if anyone can help.

[miekiemoes]

Hi,

Unsure if your Malwarebytes is up to date, so please do the following...

• Start MalwareBytes and click the Update tab. There click "Check for updates"
  
• Once the updates are downloaded, perform a quick scan again.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply along with a fresh HijackThis log, then we'll proceed from there with new steps.
  

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

[apperget]

Hi,

Unsure if your Malwarebytes is up to date, so please do the following...

• Start MalwareBytes and click the Update tab. There click "Check for updates"
  
• Once the updates are downloaded, perform a quick scan again.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply along with a fresh HijackThis log, then we'll proceed from there with new steps.
  

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

I may be back, but it appears that I've cleared it. Malwarebytes keeps picking up two things in the registry -

Malwarebytes' Anti-Malware 1.44

Database version: 3660

Windows 5.1.2600 Service Pack 3

Internet Explorer 7.0.5730.13

1/29/2010 11:35:59 PM

mbam-log-2010-01-29 (23-35-54).txt

Scan type: Quick Scan

Objects scanned: 115660

Time elapsed: 9 minute(s), 51 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 0

Registry Data Items Infected: 1

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CLASSES_ROOT\secfile (Trojan.Fakealert) -> No action taken.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (secfile) Good: (exefile) -> No action taken.

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

I haven't done anything with those as of yet. Your thoughts?

[miekiemoes]

Hi,

Please let mbam fix what it found.

Then let me know how things are now.

[miekiemoes]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!