Posted 06 October 2009 - 11:50 AM
Hello,
I have a terrible virus on my computer that keeps redirecting me to different web pages half the time when I click on link and other times I'll click on a legitimate link that will give me a "Not Found. The requested URL _____ was not found on this server. It also won't let me log into my email. I ran Malwarebytes 5 different times and it finds 11 different thing each time, I have it delete the infected things, it says I need to restart my computer to complete removal and I do that, then I delete the quarantined objects after restart, then I run Malwarebytes again and it finds the same viruses again! Here's my Malwarebytes log:
Malwarebytes' Anti-Malware 1.41
Database version: 2912
Windows 5.1.2600 Service Pack 3
10/6/2009 12:12:47 AM
mbam-log-2009-10-06 (00-12-47).txt
Scan type: Full Scan (C:\|D:\|)
Objects scanned: 235508
Time elapsed: 1 hour(s), 3 minute(s), 6 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 11
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Program Files\MSN Gaming Zone\Windows\bckg.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP794\A0112228.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP794\A0112229.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP794\A0112230.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP794\A0112236.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP794\A0112238.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP794\A0112270.sys (Worm.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\ServicePackFiles\i386\lang\voicesub.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\bckg.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\ufat.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
D:\MiniNT\system32\ufat.dll (Spyware.Zbot) -> Quarantined and deleted successfully.
Also, I have Windows XP if you need to know that info.
Please help! I've never had a virus like this and I'm worried. Thanks.