goragora111 Posted July 17, 2010 ID:285474 Share Posted July 17, 2010 Hi, so I got infected with this malware despite Avast. I bought malwarebytes, but sure enough it keeps coming back. Seems to try to have 'winprotect", in C:\Users\Stephan\AppData\Roaming\system\run32.exe running on startup, and whenever I delete that from HKCU/run, it comes back. Every now and then mbam opens up and say 'malware detected etc etc'. I quarantine/delete, run a full scan, delete all the malware, reboot, and sure enough it's all back after I reboot.I've attached the Mbam and dds log as instructed. I cannot include gmer because it keeps saying 'c/windows/system32/config/system: process cannot access the file because it's being used by another process'.mbam_log_2010_07_17__01_21_00_.txtDDS.txt Link to post Share on other sites More sharing options...
goragora111 Posted July 17, 2010 Author ID:285476 Share Posted July 17, 2010 Ah, quick update, I was able to run gmer, returns clean, and generates an empty log fileAttached is an hijack this log. Link to post Share on other sites More sharing options...
goragora111 Posted July 17, 2010 Author ID:285477 Share Posted July 17, 2010 MM... not edit button? hijackthis.zip Link to post Share on other sites More sharing options...
goragora111 Posted July 20, 2010 Author ID:287479 Share Posted July 20, 2010 Nvrmind, reformated, it solved it. Link to post Share on other sites More sharing options...
Staff screen317 Posted August 5, 2010 Staff ID:296305 Share Posted August 5, 2010 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts