BleepingComputer.com: Malwarebytes Removed over 300 viruses...

Hi Everyone,

I used this forum several years ago, and based on that knowledge, I am cleaning a machine for my niece.

I ran Malwarebytes anti-malware and it cleaned a ton of problems. I ran ccleaner too.

Everything looked good... but then I committed a big no-no (realized it after I read some posts here)... I ran combofix because I remembered it solved my problem last time. It wouldn't run, just crashed to a blue screen of death. The computer re-boots okay, and everything seems fine, but I want to make sure I do everything I can to reassure myself the system is good before I return it to her.

My question is, can anyone make some suggestions or look at a log file to help confirm this machine is clean, or help me take a few more steps to complete the job.

Sorry I acted before coming here, but I guess I felt like I could handle it.

Thanks for any help.

This post has been edited by Budapest: 20 February 2011 - 11:54 PM
Reason for edit: Moved from Vista ~BP

BTW, the computer is a Dell Inspirion with Windows Vista.

The main problem when she called me was that it was asking for a username and password, but she never set it, nor did her 17 year old daughter. I was trying to crack the password with no success until I realized that it wasn't the Windows login... just a close imitation of it. Once I realized that, I did a system restore to a previous good point.

It was at that point that I ran Malwarebytes Anti-Malware.

HTH.

If you are dealing with a malware infection, please be aware that using ComboFix is only one part of the disinfection process. Preliminary scans from other tools like DDS, RSIT and GMER should be used first because they provide comprehensive logs with specific details about files, folders and registry keys which may have been modified by malware infection. Analysis of those logs allows planning an strategy for effective disinfection and a determination if using ComboFix is necessary. ComboFix was never meant to be used as a general purpose malware scanner like SuperAntispyware or Malwarebytes' Anti-Malware which scan individual drives or different folders on a computer for viruses.

With that said, there are circumstances ComboFix will hang, crash or stall at various stages due to malware interference, failure to disable other real-time protection tools or the presence of CD Emulators (Daemon Tools, Alchohol 120%, Astroburn, AnyDVD) so that it does not complete successfully. Also, depending on how badly a system is infected, ComboFix may take longer to complete its routine than it normally does or fail to run properly. While that is not normal behavior, it is not unusual. In such cases, it is helpful to know at what stage CF stalled and to provide that information to the Helper who is assisting you so they can investigate. This is just another reason why you should only use ComboFix under supervision.

Quote

Please read the pinned topic ComboFix usage, Questions, Help? - Look here.

Quote

When you have done that, post the required logs to include your ComboFix log in that forum, NOT here, for assistance by the Malware Response Team Experts.

Hello,

Now that you have posted a log here: http://www.bleepingcomputer.com/forums/topic380947.html you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom