Jump to content

What to do next?


Recommended Posts

PC had virus/malware - malawarebytes removed 4 x trojans however Can't see any of my desktop, all programs or anything or C: unless I unhide files. Running Sophos - updated and ran system scan but not fixing it. Any suggestions of what to do next? All ideas gratefully received - PC running XP with office 2007

Malwarebytes' Anti-Malware 1.51.0.1200

www.malwarebytes.org

Database version: 6867

Windows 5.1.2600 Service Pack 2

Internet Explorer 7.0.5730.11

16/06/2011 11:34:26

mbam-log-2011-06-16 (11-34-25).txt

Scan type: Full scan (C:\|)

Objects scanned: 399141

Time elapsed: 1 hour(s), 47 minute(s), 48 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 2

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 6

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\WINDOWS\Temp\632C.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\19521316.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\farerwohlxkppqp.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\paulcheetham.beaumonti\local settings\Temp\A.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\paulcheetham.beaumonti\local settings\Temp\9.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\paulcheetham.beaumonti\application data\agtyjkj.bat (Malware.Trace) -> Quarantined and deleted successfully.

Link to post
Share on other sites

post-32477-1261866970.gif

Logs will be closed if you haven't replied within 3 days

Please don't attach the scans / logs for these tools, use "copy/paste".

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:

1. These tools MUST be run from the executable. (.exe) every time you run them

2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

Download unhide.exe & save it to your windows folder:

Right click on unhide.exe and select Run as administrator (In case you have Vista or Win7)

Reboot

This will unhide folders/files that were set to be hidden by the infection you had.

Let me know if that solved your problem.

Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.