apparent keylogger malware infection

[BobLewiston]

A day or two ago AVAST! AntiVirus warned me I was attempting to access a dangerous website. (I don't remember what website it was.) I took the warning and didn't access the website.

Later I did a sweep with AVAST! It reported three malware infections. All 3 were of High severity and of the same type (Win32:Malware-gen).

Two of the infections were within two different copies I had of the GMER executable, one on my main disk ©, and the other on my backup disk (E). These two executables were not actually named gmer.exe because, in order to avoid being impregnated with malware by the forces of evil before these files were even downloaded, those parties who make these files available for download give them random names.

The third infection was in:

E:\System Volume Information\_restore {D18642E0-9885-4956-BEC4-09E7EF0136D4}\RP453\A0106921.EXE.

As this is a hidden directory, I was unaware of its existence on my backup disk. (I had originally obtained this disk drive from a friend.)

AVAST! successfully quarantined the two infected copies of the GMER executable, but said it could no longer find the third infected file.

I ran AVAST! again twice, Malwarebytes' Antimalware twice, and SUPERAntiMalware once, in all cases doing complete scans. No malware was found in any of these scans.

Now PC Tools Firewall Plus has just reported:

"Office Data Provider for WBEM

Office Data Provider for WBEM is attempting to monitor and/or intercept NetgearCUv2 MFC Application events. This hook monitors keystroke messages. The hook procedure is associated with all existing threads running in the same desktop as the calling thread.

Only allow this if you know the application is Safe."

(Netgear is my wireless network adapter.)

I of course didn

[gtyhfy]

Hello BobLewiston,

To be on the safe side, if you suspect you have one, maybe it's better to find an expert helper to have a free check -

As we don't work on Malware removal or diagnostics in the general forums, please follow the directions below.

• Please print out, read, and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.
  One of the expert helpers there will give you one-on-one assistance when one becomes available.
  
• After posting your new post, make sure under options, you select Track this topic and choose one of the Email options (prefer Immediate Email Notification) so that you're alerted when someone has replied to your post.
  
• Please be patient as the experts can get a bit busy.
  Please try not to reply your topic within the first 48 hours, as the expert helpers will try to find the topics which has a 0 post count first. If there is no reply from any experts after 48 hours, you can reply the topic for asking help again.
  If your post has not been replied over 5 days, you may send a Private Message to a Moderator asking for assistance.
  

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here.

Thank You

[noknojon]

Hi Bob -

Lots of help available here or other forums -

Please select one forum to post in and stay there - BC is running about 2-3 days wait at this time -

Do you wish to post in HiJack area here , or stay as ClotildeA on the Bleep Forum ????-

Thank You -

EDIT -

Please post back so we can continue or delete the post if you prefer ???