BleepingComputer.com: Windows Vista Recovery virus - think it's gone but not sure

Hi Folks

I'm new here and I found the site because this morning I got infected by the Windows Vista Recovery virus

Firstly, I hope that this is the right place to be posting this!

As far as I can see, I seem to have got rid of that virus. However, I am still suspicious that something may still be lurking as when I go to Google the top bar where you find Web; Images; Video; Maps etc is black on my PC but white on my wife's.

Looking at each of the hyperlinks, I can see nothing untoward but I'm edgy after this morning.

I've tried the RKill software and according to that there were no malware issues running. I got my desktop back by running system restore.

Am I safe? Everything appears fine apart from when I tried to update my AVG it gave a "general error", so I went and downloaded the new definitions from their site and added them in manually.

Thanks for any help.

Jools

This post has been edited by quisait: 28 June 2011 - 03:16 PM

firemaster1337, on 28 June 2011 - 10:27 AM, said:

Thanks for this. I've got the software installed and updated it this morning. Here are the results:

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Database version: 6974

Windows 6.0.6001 Service Pack 1
Internet Explorer 8.0.6001.18702

29/06/2011 09:05:05
mbam-log-2011-06-29 (09-04-52).txt

Scan type: Quick scan
Objects scanned: 160515
Time elapsed: 11 minute(s), 36 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\Doudou\AppData\Local\Temp\tmp8371.tmp (Trojan.FakeAlert) -> No action taken.
c:\Windows\Temp\javA2AD.tmp (Trojan.FakeAlert) -> No action taken.

Hello,

please follow the steps in this guide: http://www.bleepingcomputer.com/virus-removal/remove-windows-vista-recovery

As you've already installed MBAM, you need not install it again. Just update and run a scan as directed in the guide.

~Blade

This post has been edited by Blade Zephon: 01 July 2011 - 05:58 AM

HI there

Can I ask why I need to install it again?

Hello,

You misread; you do not need to install it again.

~Blade

Cool! Thanks for that :d

All i have to do now is work out why the fan on laptop runs like a 747!

That would be a question to ask in our Internal hardware forum. . . not likely related to malware.

~Blade