trojan.FakeAlert after full scan

[SteveL]

First, Anti_Malware is the best $35 I ever spent (ordered the CD also). It saved my sorry butt !

Had to play a bit to get it to run but the forum had plenty about renaming the exe. Did have to install in Safe mode though.

Anyway.. I ran a full scan - 200k+ objects so it took a while and it found:

8 Adware entries in the registry

2 Trojan.Agent entries in the registry

It cleaned then and deleted them (can't tell you how happy I was to see google working normally again). That was late last night.

Ran another quick scan this morning and it found the following:

Files Infected:

C:\Documents and Settings\Steve\Local Settings\Temp\TDSSf27b.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Steve\Local Settings\Temp\TDSSf3d3.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Do I need to be concerned that there is still something lurking in the dark ?

Best regards

Steve

[malsaq]

I am new to this forum and have the same problem as Steve and its driving me nets!

The Fake.TrojanAlert is not removed by MBAM although after each scan it quarantines the trojan. But on the next scan, with or without a reboot, the trojan is back. This has been going on since the last few weeks.

Can anyone help me please?

Thanks.

[GT500]

You most likely still have a trojan that is creating those temp files. Either that or, because you installed MBAM in Safe Mode (and I could be wrong about this), the drivers for delete on reboot were not properly installed, and the files could not be deleted.

You can try uninstalling MBAM (your licence info and quarantine will be intact when you reinstall), and then reinstall MBAM, and see if it can remove them.

I'm going to assume that my uninstall/reinstall idea won't work, and if it does not then read these instructions for posting in the Malware Removal - HijackThis Logs forum. One of our malware removal experts will be able to help you get your systems cleaned up.

[exile360]

Greetings and welcome to the forum. These instructions go for both of you. To get you fixed up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

edit: Sorry GT500, didn't realize you were posting a reply.

[GT500]

edit: Sorry GT500, didn't realize you were posting a reply.

That's OK. My slow connection here is making it take longer for me to get to typing out replies.