Jump to content

Not properly deleting/infection keeps coming back?


Recommended Posts

Note to mods, if there is a more appropriate forum for this, please throw it there.

Well first of all, I have no clue how this happened; it's pretty much out of the blue, I mean everything was fine two nights ago when I shut my laptop off...but anyways...

Turned on my laptop yesterday, loaded up IE, tab open a couple of links from the Microsoft homepage, and was instantly hit with like 30 or so viruses according to Malwarebytes, which I promptly deleted all of course. Now normally that would be the end of the problem...did a follow up scan to make sure, it turned up another 7, deleted them. And it's been continuing like this on and on...every time I scan with Malwarebytes, I swear it finds the exact same 7 viruses or whatever, deletes them, then when I scan again, they're there...again >.>

So yeah...what's the deal here? Never seen this happen before, everything is up to date with Malwarebytes, so yeah...bit perplexed here. Whatever this infection is, it's messing with my poor sidebar it seems, all the gadgets like the calendar, clock, rss read, etc aren't loading and in general my laptop is far slower than usual in loading webpages, programs, etc.

Here's the log btw...again, every time I scan, remove, and reset my laptop, the same exact ones reappear again if I scan again. Please help!

Malwarebytes' Anti-Malware 1.50

www.malwarebytes.org

Database version: 5253

Windows 6.0.6002 Service Pack 2

Internet Explorer 7.0.6002.18005

12/5/2010 8:08:47 PM

mbam-log-2010-12-05 (20-08-47).txt

Scan type: Quick scan

Objects scanned: 158235

Time elapsed: 2 minute(s), 37 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 2

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 5

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Malware.Packer) -> Value: NvCplDaemonTool -> Delete on reboot.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Malware.Packer) -> Value: NvCplDaemonTool -> Delete on reboot.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\System32\puloadt32.dll (Malware.Packer) -> Quarantined and deleted successfully.

c:\Users\Owner\puloadt32.dll (Malware.Packer) -> Quarantined and deleted successfully.

c:\Users\Owner\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scandisk.lnk (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\Windows\SysWOW64\puloadt32.dll (Trojan.Agent) -> Quarantined and deleted successfully.

c:\Users\Owner\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\scanbdiskpf81.dll (Trojan.Agent) -> Quarantined and deleted successfully.

Link to post
Share on other sites

http://www.bleepingcomputer.com/forums/topic364992.html

You should only post your question in ONE forum at a time, if you get replies/help from more than one person at more than one forum, that can cause issues for both you and the person that is helping you.

;)

That being said,

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless it's been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help.

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

Also, when replying, please use the "ADD REPLY" button t_reply.gif located at the bottom of the page, as this makes the forum easier to read.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Thank you ;)

Link to post
Share on other sites

http://www.bleepingcomputer.com/forums/topic364992.html

You should only post your question in ONE forum at a time, if you get replies/help from more than one person at more than one forum, that can cause issues for both you and the person that is helping you.

;)

That being said,

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless it's been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help.

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

Also, when replying, please use the "ADD REPLY" button t_reply.gif located at the bottom of the page, as this makes the forum easier to read.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Thank you :)

What, those two forums aren't related for starters, are they? Plus not getting any replies on that other one, so I figured the official malwarebytes forum would be more helpful (which it seems so as I did get a reply ;)).

Anyways, guess I'll be posting in that subforum you linked, thanks.

Link to post
Share on other sites

I'm just saying that if someone replies to your topic there first (or here) and then someone else replies here (or there) and if you were following advice from both, and did not tell each person that you were receiving help elsewhere, that can cause confusion for all parties involved plus you could also damage your system. It also ties up someone at one of the sites that could be helping someone else if you are posting in two places.

Does that make sense? ;)

The official Malwarebytes site & forum (which this site of course is) is probably the best place to come for this since the detections in question were made with Malwarebytes.

However, both Bleeping Computer and Malwarebytes offer excellent help in malware removal :)

Good luck! :)

P.S Please use the "ADD REPLY" button t_reply.gif located at the bottom of the page. ;)

Link to post
Share on other sites

Eh, all I want is an answer regardless of the source, it's been bugging me for 2 days now and I've been afraid to log onto any online games or check my banking or anything in fear of an attack or something. So just using all possible outlets for advice ;)

Link to post
Share on other sites

  • Root Admin

Hello , and welcome to Malwarebytes.org

You need to have one of the Experts assist you from there or here but not both as it wastes time and resources which are already limited.

Regardless if here or there it does take a few days for someone to respond. If you do wish to get assistance here then you should let the other site know and close that post and follow the advice below.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.