free-viruscan malware

[drgill_co]

Hi

I have managed to contract this malware on my Windows XP PC.

hxxp://free-viruscan.com/id/4912933/4/1/

Is there a way to remove it?

thanks for your help

Dave

[AdvancedSetup]

Hi Dave,

Please follow the instructions here Pre- HJT Post Instructions and someone will be glad to assist you.

[drgill_co]

Hi Dave,

Please follow the instructions here Pre- HJT Post Instructions and someone will be glad to assist you.

Here is the MBAM LOG

Malwarebytes' Anti-Malware 1.17

Database version: 846

5:11:41 PM 6/23/2008

mbam-log-6-23-2008 (17-11-41).txt

Scan type: Quick Scan

Objects scanned: 41927

Time elapsed: 1 hour(s), 41 minute(s), 53 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 6

Registry Values Infected: 0

Registry Data Items Infected: 2

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{90ce74cc-788a-4a00-b38d-cbca08cc9e8f} (Adware.ISTBar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{cc257918-f435-4a33-8231-2b8195990cca} (Adware.ISTBar) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\The Weather Channel (Adware.Hotbar) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\Fonts\acrsecB.fon (Trojan.Agent) -> Quarantined and deleted successfully.

C:\WINDOWS\Fonts\acrsecI.fon (Trojan.Agent) -> Quarantined and deleted successfully.

[AdvancedSetup]

Dave,

Please read the post that I linked to. We need you to follow those instructions and post back all of the information from those instructions and post it in a NEW topic here: Malware Removal - HijackThis Logs - forum

Thank you

[drgill_co]

Dave,

Please read the post that I linked to. We need you to follow those instructions and post back all of the information from those instructions and post it in a NEW topic here: Malware Removal - HijackThis Logs - forum

Thank you

I did the spybot and the MBAM, panda is still running, do you need all 3 or should I post in pieces?

thanks

Dave

[AdvancedSetup]

Once everything is done it's easier to read and study the logs when they're all together. Please just wait till they're all done and post them all in a new topic.

Thanks.

[JeanInMontana]

I have replied to this is the HJT forum. Please note the version of MBAM and HJT are both outdated.