Jump to content

Updated and ran MWB, "3 trojans" detected, proceeded, now BSOD in Normal and Safe mode


Recommended Posts

Backstory is I had a TDL4 bootkit that Maniac/Borislav walked me through removing last weekend. Our work seemed to get the computer all cleaned up, but it shook me up a bit because it was so nasty, and I still have no idea how I got it. Installed the free version of Avira, update it daily, and have MWB updated as well. Have a new router I haven't installed yet, too, but the old has a firewall.

I noticed weird behavior today, in one case AcroRd32 was taking up 700mb of RAM, so I ended it. It does have a bug where in Firefox, if you have a PDF open but then shutdown Firefox, the Acrobat process continues to run anyway. Never seen Acrobat take that much RAM, though. I do work that includes quite a few research paper PDFs, and I've often wondered if it was possible to exploit one, but on with the story.

A little while later, Avira said it had detected and "guarded" a few things. I ran MWB, and it detected "3 trojans," I think all named the same, and I think one was in an IE5 temporary folder. I had it remedy the situation, and it told me to reboot. I did reboot, and the PC blue screened. I tried safe mode, and it blue screened. Tried XP repair from CD, which it did, and the PC went to the start of the safe mode screen, but then said "XP setup cannot start under safe mode."

Any advice on where to go from here?

Link to post
Share on other sites

Sorry to hear that you got infected..... Being that you were infected, and then re-infected once again you will have to seek help for the experts once again....

Hi, and Welcome to Malwarebytes!

Please read the following so that you can begin the cleaning process:

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

  • Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.
  • After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post.
  • One of the expert helpers there will give you one-on-one assistance when one becomes available.
  • Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.

NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

    • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
      Or
    • You may send a Private Message to a Moderator asking for assistance.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here.

Please be patient, someone will assist you as soon as it is possible.

PS: Please use the "ADDREPLY" t_reply.gif button instead of other ones when you start replying. :lol:

Link to post
Share on other sites

Ok, I can post there, I should have been a little more clear: I'm not sure if I'm getting a BSOD because Malwarebytes removed something it shouldn't have, or isn't functioning properly,

OR

If the trojans detected were all the real deal, and MWB simply wasn't able to fix them as claimed.

Since I wasn't sure which, I posted here.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.