Fake anti-virus

[bangheadhere]

Greetings All

I started with this last week:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4842

Windows 6.0.6002 Service Pack 2 (Safe Mode)

Internet Explorer 8.0.6001.18975

10/17/2010 1:32:49 PM

mbam-log-2010-10-17 (13-32-49).txt

Scan type: Full scan (C:\|D:\|)

Objects scanned: 795990

Time elapsed: 2 hour(s), 29 minute(s), 54 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rhsdfgyr (Antivirus.Action) -> No action taken.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Users\Mommy\AppData\Local\Temp\eggnibefy\evjirvsyhsn.exe (Antivirus.Action) -> No action taken.

C:\Users\Mommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\THKJZGMG\cqavklynbvamkoinira[1].exe (Antivirus.Action) -> No action taken.

The last mbam scan showed cleared.

Next----defogger

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 12:54 on 23/10/2010 (Mommy)

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

DDS.scr......after 2 hours I gave up.....should I Try GMER? Now the computer has me locked out of a few programs......Windows Sidebar is one. And movement of the mouse is real eratic. Any help is greatly appreciated.

[MrCharlie]

Welcome to the forum.

See if following this guide works.

Make sure you run both rkill and exehelper.

Most important....update MBAM before you run it.

Post the logs back here, Good Luck....MrC

[LDTate]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!