evil0bunni Posted May 15, 2011 ID:429542 Share Posted May 15, 2011 Hi, I am new to this forum and in need of some serious help! The other day my system was attacked with Win 7 Antivirus 2011, so after making sure my other computer was virus free I Googled how to remove it. The most famous answer was to download Malwarebytes which I did. I had to run it on the other account on my infected laptop since I was unable to access the internet on the infected account. Once I ran it, it found 3 malicious viruses and removed them. The report then read clean, this all being done in Safe Mode with Networking. I restarted in normal mode and signed into the once infected account. I attempted to open my Firefox to which I was asked "what program would you like to open this file with?". So I attempted to open IE which did the same thing, and every single other program I attempt to open it asks the same question. I am beginning to become slightly frustrated, I need my computer to work! Please Help! Below is the log from the scan from today 5/15/2011 :Malwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 6570Windows 6.1.7600 (Safe Mode)Internet Explorer 8.0.7600.163855/15/2011 3:56:31 PMmbam-log-2011-05-15 (15-56-31).txtScan type: Quick scanObjects scanned: 183509Time elapsed: 4 minute(s), 27 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
Staff screen317 Posted May 18, 2011 Staff ID:430721 Share Posted May 18, 2011 Hi and welcome to Malwarebytes.Please download exeHelper from one of these two places:http://www.raktor.net/exeHelper/exeHelper.comhttp://www.raktor.net/exeHelper/exeHelper.scrSave it to your Desktop and run it. When it finishes, restart your computer and see if you can run .exe files now.Please update MBAM, run a Quick Scan, and post its log.Next, download DDS by sUBs and save it to your Desktop.Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply. Link to post Share on other sites More sharing options...
evil0bunni Posted May 19, 2011 Author ID:430867 Share Posted May 19, 2011 Thank you for your help. I have been able to open exe files now. Per your request the MBAM long is :Malwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 6612Windows 6.1.7600Internet Explorer 8.0.7600.163855/18/2011 9:29:12 PMmbam-log-2011-05-18 (21-29-12).txtScan type: Quick scanObjects scanned: 182772Time elapsed: 7 minute(s), 33 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected)I ran the DDS but my issue with posting the log is that it shows all the programs on my system, and with the recent virus issue I am reserved in posting it on an open forum. Everything seems to be operating as was prior to the infection. Link to post Share on other sites More sharing options...
Staff screen317 Posted May 20, 2011 Staff ID:431728 Share Posted May 20, 2011 You could always PM me the log and I'll delete it when we're through? Link to post Share on other sites More sharing options...
Staff screen317 Posted May 20, 2011 Staff ID:431758 Share Posted May 20, 2011 Hi,I notice that you are using more than one antivirus program (Norton and Antivir). This is very dangerous, as multiple AVs can interfere with one another and actually allow MORE viruses to get through. I strongly suggest you go to Start -> Control Panel -> Add or Remove Programs and uninstall all but one antivirus program.The DDS log didn't show any malware, but let's check for leftovers just to be sure:Next, please run a free online scan with the ESET Online ScannerNote: You will need to use Internet Explorer for this scan.Tick the box next to YES, I accept the Terms of Use.Click StartWhen asked, allow the ActiveX control to installClick StartMake sure that the options Remove found threats and the option Scan unwanted applications is checkedClick ScanWait for the scan to finishUse Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txtCopy and paste that log as a reply to this topicNext, download my Security Check from here or here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.Let me know how things are running now and what issues remain.-screen317 Link to post Share on other sites More sharing options...
evil0bunni Posted May 21, 2011 Author ID:431872 Share Posted May 21, 2011 Hi, I did the Eset Scanner, but being a novice at stuff like this I am not sure how to use Notepad to open the logfile. It said it cleaned 10 infected files, and I can view the files, is that what I need to post? Also I looked in the program files to remove Norton (which I never activated) but I was unable to locate it. My boyfriend did uninstall it before I ran the exehelper, is that why I am unable to find it? Sorry for sounding so helpless and novice lol but I truly only know how to use the internet and microsoft word lol Link to post Share on other sites More sharing options...
Staff screen317 Posted May 25, 2011 Staff ID:433115 Share Posted May 25, 2011 Hi,Yes I would like the list that ESET removed.Just double-click this file:C:\Program Files\EsetOnlineScanner\log.txtYou can run Norton's removal tool from here.Proceed with the rest of my instructions above. Link to post Share on other sites More sharing options...
Staff screen317 Posted June 6, 2011 Staff ID:437523 Share Posted June 6, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts