Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Odd Messages and Popups on screen, Strange Behavior


  • Please log in to reply
15 replies to this topic

#1 DarkAchilles

DarkAchilles

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 07 October 2008 - 09:09 PM

This happened about 4 days ago; I got a popup pretending to be a Windows Firewall Alert, but I knew it was fake because I don't have Windows' default language set to English.
Anyway, it said something about a trojan. Since then, I have gotten several of those messages, each with a different warning about a trojan on my computer.

They were:
"trojan-spy.html.bankfraud.dq"
"trojan-spy.win32.keylogger.aa"
"trojan-spy.win32.greenscreen"
"trojan-spy.win32.tiny.h"

Now, I'm not sure if I actually have those trojans, or if the messages were there to annoy me. I used Malwarebytes' Anti-Malware to remove some of the viruses, and now the messages no longer appear. However, the computer still acts strangely, and task manager was disabled until I re-enabled it using the registry editor.

Some processes that I am suspicious of that are running in Task Manager:

-stormliv.exe
-svchost.exe (several, about ten of these, all named the same thing)
-ctfmon.exe

Sometimes, Firefox will crash for no reason, and I can't unhide hidden files and folders. I also can't seem to boot into safe mode.

Also: My computer used to show a "CAPS LOCK" text on the screen, and would show a little bar whenever I adjusted the volume of it (it's a laptop). Now the text is gone.

I can't see or access some folders, even if I unhide folders; and also, I can't save in Microsoft Word anymore.

How can I fix this problem?
And is it safe to copy some files to a removable storage disk? Will it infect the disk?

PLEASE HELP!

Also: My C: drive has zero (0) bytes left in it. It says, "Free space: 0 bytes"
(I use Windows XP)

I'm not sure if I am allowed to post a Malwarebytes' Anti-Malware log on this forum. If I can, please tell me, and I will post it.

Edited by DarkAchilles, 07 October 2008 - 09:11 PM.


BC AdBot (Login to Remove)

 


#2 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 07 October 2008 - 09:18 PM

I'm not sure if this is helpful or not; there is no arrow on the taskbar anymore...

#3 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:31 AM

Posted 07 October 2008 - 10:42 PM

Yes post that MBAM log and run atf and SAS from safe mode next, post that log

then finish with another updated MBAM scan and log

http://www.bleepingcomputer.com/forums/ind...mp;#entry948894
Chewy

No. Try not. Do... or do not. There is no try.

#4 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 09 October 2008 - 08:43 PM

I can't boot into safe mode as of now...

I'm not sure how to attach the log though.. I'm totally new to forums

#5 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:31 AM

Posted 09 October 2008 - 10:08 PM

Run atf and SAS from normal mode

The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.


http://www.webmasternow.com/copyandpaste.html

Don't worry we all started at ground zero with this stuff

the only stupid question is one you don't ask

I'm totally new to forums


I just read the threads myself for a long time

Edited by DaChew, 09 October 2008 - 10:11 PM.

Chewy

No. Try not. Do... or do not. There is no try.

#6 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 11 October 2008 - 12:28 PM

Malwarebytes' Anti-Malware 1.28
Database version: 1226
Windows 5.1.2600 Service Pack 2

2008-10-4 11:51:16
mbam-log-2008-10-04 (11-51-15).txt

Scan type: Full Scan (C:\|)
Objects scanned: 112027
Time elapsed: 15 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 41
Registry Values Infected: 5
Registry Data Items Infected: 1
Folders Infected: 3
Files Infected: 69

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\system32\ckvo0.dll (Trojan.Agent) -> No action taken.

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{63397320-E2E5-2180-D571-01E9F87169CF} (Trojan.FakeAlert.H) -> No action taken.
HKEY_CLASSES_ROOT\qqiehelper.qqbrowserhelperobject (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{54f35df6-7ea5-4da8-84ff-db647d5a69e7} (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{5ee9791e-3de9-4499-88bf-7681fdcbf7a4} (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{d17cf0b4-0870-4426-845d-632cc02ce9e6} (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{39732ce5-0ee6-401a-a0b2-27f46b755c5b} (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{54ebd53a-9bc1-480b-966a-843a333ca162} (Spyware.OnlineGames) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{54ebd53a-9bc1-480b-966a-843a333ca162} (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\qqiehelper.qqbrowserhelperobject.1 (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{0656a137-b161-cadd-9777-e37a75727e78} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{0b682cc1-fb40-4006-a5dd-99edd3c9095d} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{0e1230f8-ea50-42a9-983c-d22abc2eeb4c} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{9dd4258a-7138-49c4-8d34-587879a5c7a4} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{b8c0220d-763d-49a4-95f4-61dfdec66ee6} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{c3bcc488-1ae7-11d4-ab82-0010a4ec2338} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{000000da-0786-4633-87c6-1aa7a4429ef1} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{54645654-2225-4455-44a1-9f4543d34545} (Fake.Dropped.Malware) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{5c7f15e1-f31a-44fd-aa1a-2ec63aaffd3a} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9dd4258a-7138-49c4-8d34-587879a5c7a4} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b8c0220d-763d-49a4-95f4-61dfdec66ee6} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3bcc488-1ae7-11d4-ab82-0010a4ec2338} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000000da-0786-4633-87c6-1aa7a4429ef1} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\dpcproxy (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\logons (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\typelib (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\HOL5_VXIEWER.FULL.1 (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Classes\hol5_vxiewer.full.1 (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Classes\applications\accessdiver.exe (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\fwbd (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\HolLol (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Inet Delivery (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Inet Delivery (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mslagent (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Invictus (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Golden Palace Casino PT (Trojan.DNSChanger) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Golden Palace Casino NEW (Trojan.DNSChanger) -> No action taken.
HKEY_CURRENT_USER\SYSTEM\currentcontrolset\Services\iTunesMusic (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SYSTEM\currentcontrolset\Services\rdriv (Fake.Dropped.Malware) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KSD2Service (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\wkey (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\mwc (Malware.Trace) -> No action taken.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\strinfoapp (Trojan.FakeAlert.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kamsoft (Trojan.FakeAlert.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mntmonadm (Trojan.FakeAlert.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\izty6idehm (Trojan.FakeAlert.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\SystemCheck2 (Trojan.Agent) -> No action taken.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> No action taken.

Folders Infected:
C:\WINDOWS\mslagent (Adware.EGDAccess) -> No action taken.
C:\Program Files\Inet Delivery (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\system32\smp (Fake.Dropped.Malware) -> No action taken.

Files Infected:
C:\WINDOWS\system32\ckvo.exe (Trojan.FakeAlert.H) -> No action taken.
C:\WINDOWS\system32\vyfstqnw.exe (Trojan.FakeAlert.H) -> No action taken.
C:\Documents and Settings\All Users\Application Data\napaxero\vyfurczw.exe (Trojan.FakeAlert.H) -> No action taken.
d:\Program Files\Tencent\QQ\QQIEHelper.dll (Spyware.OnlineGames) -> No action taken.
C:\WINDOWS\odunbeps.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\apsagy.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\mslagent\2_mslagent.dll (Adware.EGDAccess) -> No action taken.
C:\WINDOWS\mslagent\mslagent.exe (Adware.EGDAccess) -> No action taken.
C:\WINDOWS\mslagent\uninstall.exe (Adware.EGDAccess) -> No action taken.
C:\Program Files\Inet Delivery\inetdl.exe (Fake.Dropped.Malware) -> No action taken.
C:\Program Files\Inet Delivery\intdel.exe (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\system32\smp\msrc.exe (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\system32\ckvo0.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\ckvo1.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\a.bat (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\base64.tmp (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\FVProtect.exe (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\userconfig9x.dll (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\winsystem.exe (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\zip1.tmp (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\zip2.tmp (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\zip3.tmp (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\zipped.tmp (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\bdn.com (Trojan.Agent) -> No action taken.
C:\WINDOWS\iTunesMusic.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\mssecu.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\akttzn.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\anticipator.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\bdn.com (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\bsva-egihsg52.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\dpcproxy.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\emesx.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\h@tkeysh@@k.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\hoproxy.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\hxiwlgpm.dat (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\hxiwlgpm.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\medup012.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\medup020.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\msgp.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\msnbho.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\mssecu.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\msvchost.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\mtr2.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\mwin32.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\netode.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\newsd32.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\ps1.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\psof1.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\psoft1.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\regc64.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\regm64.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\Rundl1.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\sncntr.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\ssurf022.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\ssvchost.com (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\ssvchost.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\sysreq.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\taack.dat (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\taack.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\temp#01.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\thun.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\thun32.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\VBIEWER.OCX (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\vcatchpi.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\winlogonpc.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\winsystem.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\WINWGPX.EXE (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\0.txt (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\vbsys2.dll (Trojan.Clicker) -> No action taken.

#7 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:31 AM

Posted 12 October 2008 - 03:09 PM

Update MBAM and run a new scan, let it remove anything and reboot if it says so and then post that log, does safe mode still not work? Give a few tries, the timing of tapping the F8 key is tricky

Have you installed SAS and downloaded ATF?
Chewy

No. Try not. Do... or do not. There is no try.

#8 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 16 October 2008 - 05:47 PM

I can't install anything; my C: drive has 0 bytes of empty space...
and I still can't boot into safe mode

#9 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 18 October 2008 - 12:41 PM

Okay... I had to shutdown my laptop yesterday with the power button because the shutdown button in XP wasn't working. But when I started it today, (this is the laptop with the virus) Windows XP ran a disk check, and it said "Bad links in lost chain corrected" When I booted the computer, there was 344 MB of empty space instead of 0 bytes, and after I ran the Disk Cleaning utility, I had 921 MB of empty space left... Why is this? And some of the things I couldn't do before are now working. (Before, I couldn't download anything, but now I can; and opening new windows in firefox will not crash it. I can also save in MS Word now.) But I still can't install programs or anything..

#10 volty

volty

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 18 October 2008 - 12:46 PM

I'm having a similar problem as you, this totally stinks.

I don't think I'm going to be able to fix it with antivirus/antispyware... : (

Did you have anything important on your computer?

I'm about to wipe mine clean and start from scratch..it's terrible.

My other computer was like my baby, we've been through so much together, I'd hate to wipe her clean.

If I have to though.. I guess I have to.

#11 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 18 October 2008 - 12:51 PM

I'm having a similar problem as you, this totally stinks.

I don't think I'm going to be able to fix it with antivirus/antispyware... : (

Did you have anything important on your computer?

I'm about to wipe mine clean and start from scratch..it's terrible.

My other computer was like my baby, we've been through so much together, I'd hate to wipe her clean.

If I have to though.. I guess I have to.


I'm not sure....
I dunno if I'll wipe it clean; I may back up some files and then reinstall windows; my hard drive is partitioned into four drives; I think I'll be able to salvage most of it....

I connected a 512 MB test drive to my infected laptop to see if it would infect the drive; it didn't appear to - I attached it to a different computer of mine (it's really old and I was going to get rid of it anyway) and it didn't infect it or do anything weird. If it is safe to connect flash drives and externals to the laptop, I'll back everything up and possibly wipe the computer. But if I can get rid of the virus without deleting any important files, that's the way I'll go...

#12 volty

volty

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:03:31 AM

Posted 18 October 2008 - 12:56 PM

I'm having a similar problem as you, this totally stinks.

I don't think I'm going to be able to fix it with antivirus/antispyware... : (

Did you have anything important on your computer?

I'm about to wipe mine clean and start from scratch..it's terrible.

My other computer was like my baby, we've been through so much together, I'd hate to wipe her clean.

If I have to though.. I guess I have to.


I'm not sure....
I dunno if I'll wipe it clean; I may back up some files and then reinstall windows; my hard drive is partitioned into four drives; I think I'll be able to salvage most of it....

I connected a 512 MB test drive to my infected laptop to see if it would infect the drive; it didn't appear to - I attached it to a different computer of mine (it's really old and I was going to get rid of it anyway) and it didn't infect it or do anything weird. If it is safe to connect flash drives and externals to the laptop, I'll back everything up and possibly wipe the computer. But if I can get rid of the virus without deleting any important files, that's the way I'll go...


Yeah, I just started a thread about the flash drive spreading infections.

and yeah, if my computer can be saved, I won't start fresh but.. if not, I'll do a clean install...of course I'd hate to do a clean install.. finding all of the drivers again and whatnot and all of my old programs, I had a lot of freeware that probably won't be able to be found again.

Headaches.

#13 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 18 October 2008 - 01:03 PM

@Dark Ackilles

WILL it let you re-run the malawarebytes with your current definitions and reboot to clean out the crap it finds?

Edited by ruby1, 18 October 2008 - 01:04 PM.


#14 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 18 October 2008 - 07:19 PM

I ran another Malwarebytes scan...
it still seems like the system has a virus though.. i'm not sure


Malwarebytes' Anti-Malware 1.28
Database version: 1226
Windows 5.1.2600 Service Pack 2

2008-10-19 8:15:03
mbam-log-2008-10-19 (08-15-03).txt

Scan type: Full Scan (C:\|)
Objects scanned: 112851
Time elapsed: 11 minute(s), 51 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#15 DarkAchilles

DarkAchilles
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:12:31 AM

Posted 18 October 2008 - 07:22 PM

For example, when I open My Computer, and I click on C:, it opens a dialog box and asks what program to open the "file" with. But if I type C: into the address bar in Explorer, it works fine..




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users