Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trouble with Antispyware Master


  • Please log in to reply
4 replies to this topic

#1 pazza22

pazza22

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:37 PM

Posted 25 August 2008 - 06:08 PM

So, I'm having trouble with Antispyware Master too. :flowers: Twice now when I use IE 7.0 in the middle of loading a new page, I get the dreaded "Your computer is infected message". Luckily, both times I've been able to stop the Antispyware Master from downloading by shutting my internet port off immediately. I've looked in the windows system32 folder for various references to the files that other have said are part of this problem, and haven't found anything.

I've scanned my computer with McAfee (which i use as my main virus suite all the time)
I've scanned my computer with LavaSoft's Ad aware - nothing
I then came across this forum and completed the steps that quietman7 suggested (thank you quietman7 :trumpet: )

Super Anti Spyware found 503 bad cookies - most of which are benign. Though I did find an Antispyware Master cookie. I deleted ALL cookies nonetheless.
Below is my log from Malware Bytes - Rogue Remover. It found 5 issues

----------------------------------
Malware Bytes Log

Malwarebytes' Anti-Malware 1.25
Database version: 1062
Windows 5.1.2600 Service Pack 2

9:16:03 PM 8/24/2008
mbam-log-08-24-2008 (21-15-57).txt

Scan type: Full Scan (C:\|)
Objects scanned: 181171
Time elapsed: 1 hour(s), 49 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> No action taken.
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c} (Adware.Minibug) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

----------------------------------

My questions are these..

1) Do you think that I have effectively stopped AntiSpyware Master? How would I know for sure I got everything (besides reformatting)?
2) Because I have had an issue with AntiSpyware Master, does that now mean that I have a trojan port where other things can get infiltrated through that opening?
3) How do I know if in fact I was fully infected by this malware?
3) What malware/virus suite would you recommend? Obviously my McAfee didn't do anything to prevent this from happening.

I almost always use Firefox because of all the issues that come with using IE.

Thank you in advance for your help/insight. :thumbsup:

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:37 PM

Posted 26 August 2008 - 01:44 AM

Your Malwarebytes log shows "No action taken" for the items found. At the end of the scan you need to make sure that everything is checked and click Remove Selected.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 pazza22

pazza22
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:37 PM

Posted 26 August 2008 - 02:02 PM

Buapest- The files are actually quarantined or so Malware is now saying. Maybe I just did the log before putting them in quarantine.

I ran another full Malware scan today, just in case. Here's my updated log:
----------------------------------------
Malwarebytes' Anti-Malware 1.25
Database version: 1062
Windows 5.1.2600 Service Pack 2

2:28:27 PM 8/26/2008
mbam-log-08-26-2008 (14-28-27).txt

Scan type: Full Scan (C:\|)
Objects scanned: 175660
Time elapsed: 3 hour(s), 14 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
------------------------------------

#4 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:37 PM

Posted 26 August 2008 - 04:13 PM

Are you still experiencing problems?
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#5 pazza22

pazza22
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:37 PM

Posted 27 August 2008 - 07:31 PM

I haven't used IE since and it only happens when I use IE.

My questions are these..

1) Do you think that I have effectively stopped AntiSpyware Master? How would I know for sure I got everything (besides reformatting)?
2) Because I have had an issue with AntiSpyware Master, does that now mean that I have a trojan port where other things can get infiltrated through that opening?
3) How do I know if in fact I was fully infected by this malware?
3) What malware/virus suite would you recommend? Obviously my McAfee didn't do anything to prevent this from happening.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users