Jump to content

Ongoing battle versus virus (from False Positives)

Recommended Posts

New thread as requested. Old one is here, and ongoing details will be posted here.

Already had MalwareBytes installed on my computer. Decided to try making a copy of the installer and naming it mbam-setup.com as this thread instructed (link courtesy of Miekiemoes). Mbam-setup.com was installing just fine until I got a "DeleteFile failed: code 5. Access denied" dialogue box concerning mbam.dll, and it asked for Abort, Retry, Ignore. I posted this update and in the meantime decided that just for giggles, I'd go ahead and scan with the updated mbam.exe and see if it got anything. It did! I've got an infected Memory File (under Other, says 1832), two regular Files, and two Registry Values (under Other, says value: prbuhvpv) flagged as Trojan.FakeAlert, and two Registry Keys flagged as Trojan.Fraudpack.

So, I remove the infected items? Save logfile, show logfile? And should I just hit Abort and then Cancel on the mbam.com setup still on my taskbar?

Link to post
Share on other sites

It's so quiet. No pop-ups for this 'antivirus' virus or porn, no constant barrage of urgent dialogue boxes, no error messages whenever I try to open something... You people are now my heroes.

Seriously. A thousand blessings upon your homes and your hard drives. May your servers never lag and your firewalls never fail. And if Wal-Mart paid better then I would so buy the full version of MalwareBytes, in a heartbeat. You guys rock.

One logfile as requested! mbam_log_2010_02_24__05_15_40_.txt

Link to post
Share on other sites

  • Staff

This looks OK again. ;)

Now you see that malwarebytes detects and removes this infection after all :)


Please read my Prevention page with lots of info and tips how to prevent this in the future.

And if you want to improve speed/system performance after malware removal, take a look here.

Extra note: Make sure your programs are up to date - because older versions may contain Security Leaks. To find out what programs need to be updated, please run the Secunia Software Inspector Scan.

Happy Surfing again!

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.