Trojan Fake.Alert - MBAM wont remove

[SamT]

Hi guys...

Whilst running MSConfig the other day, I noticed a start up item that I didn't recognise..

M5T8QL3YW3 C:\Users\samt\Appdata\Local\Temp\Yg1.exe HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Googling revealed that this is Trojan Fake.Alert.

Avira didn't pick it up, SpyBot S&D didn't either. Google said MBAM would fix it and sure it finds it, says its deleted it and it just keeps coming back.

Also ran full version of RegCure to sort my registry out to no avail.

Tried running in Normal and Safe Mode.

Please Help

Running Windows 7 Professional - 32Bit

Running Free version of MBAM.

Here is the MBAM log..

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4193

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

16/06/2010 13:43:01

mbam-log-2010-06-16 (13-43-01).txt

Scan type: Quick scan

Objects scanned: 129351

Time elapsed: 7 minute(s), 16 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\m5t8ql3yw3 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------

[AdvancedSetup]

Hello , and welcome to Malwarebytes.org

We don't work on Malware removal in the general forums.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

[SamT]

Oh great!!!

DDS wont download - just sits there in firefox download page saying 'starting'

so skipped that..

Now I've had two Blue Screens of Death whilst trying to run GMER - I'm close to tears. I've had no bother with this system since installing windows 7 what so ever. I have a report to hand in for University and I'm fast running out of time.

[noknojon]

Hi Samt -

You can try to run GMER or other items in safe mode -

If you have no success please post a new topic to the indicated area of the forum with what you can and explain your problem -

The sooner you post the quicker the chance of a response -

Thank You -

[SamT]

Hi Samt -

You can try to run GMER or other items in safe mode -

If you have no success please post a new topic to the indicated area of the forum with what you can and explain your problem -

The sooner you post the quicker the chance of a response -

Thank You -

cheers for that - I got it to work in safemode.

I've created a new thread in the Hijack this forum with all the logs attached etc.

thanks