Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win 7 antispyware 2012


  • Please log in to reply
1 reply to this topic

#1 distressed damsel

distressed damsel

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:56 PM

Posted 26 July 2011 - 02:45 AM

My computer was recently infected with Win 7 Antispyware 2012. I have used the bleeping computer guide (located here http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012 ) to remove the virus and everything worked like clockwork until step 13. The problem is, unlike the instructions, Malwarebytes did not find any infections. Is this normal?

A friend told me to do a system restore just in case and I attempted to do so in both normal and safe mode. I received, however, a message that said "no restore points have been created on your computer's system drive". I haven't manually created any system restore points before, although I thought the system automatically did this for you. Does this mean the virus has disabled the restore points?

I'm loathed to think that the virus is still somewhere on my computer. Is someone able to tell me why Malwarebytes didn't find anything? And what I need to do to make sure the virus isn't still lurking somewhere on my computer?

Thanks in advance.

BC AdBot (Login to Remove)

 


#2 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:05:56 AM

Posted 26 July 2011 - 11:14 AM

Hi distressed damsel,

:welcome: to Bleeping Computer.

My name is Jason and I'll be helping you with your computer problems. You can call me by my screename jntkwx or Jason is fine.

Some things to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • Please do not attach logs or put logs in code boxes.
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can also help.
  • Do not run anything while running a fix.
  • If you don't understand a step, please ask for clarification before continuing with any future steps.

Click on the Watch Topic button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.

Note to others: The instructions posted here are intended for the person who began this topic. Please DO NOT use these instructions on your own computer. Start a new topic in the appropriate forum.

 

No, it's not normal for Malwarebytes to not find any infections. It should be able to find and remove this infection. You may have a new version of Win 7 Antispyware 2012 that is not yet detected by Malwarebytes.

I'm not sure whether the virus has disabled restore points or not. Occasionally, viruses like to infect restore points so that if you try to restore your computer to them, you're automatically reinfected.

:step1: Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt.
  • Please post the contents of that document.

:step2: Please download MiniToolBox and run it.

Checkmark following boxes:
  • List last 10 Event Viewer log
  • List Users, Partitions and Memory size
Click Go and post the result.

:step3: Rerun Malwarebytes
Open Malwarebytes, click on the Update tab, and click the check for Updates button.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

Troubleshoot Malwarebytes' Anti-Malware

:step4: Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

(If your computer is 64-Bit, please use this download instead.)
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :dir
    %AllUsersProfile% /s /t7
    %LocalAppData% /s /t7
    %Temp% /s /t7
    %LocalAppData% /s /t7
    %AppData%\ /s /t7
    %windir%\system32 /n*.dll /t7
    %windir%\system32 /n*.exe /t7
    
    :regfind
    kdn.exe
    
    
  • Click the Look button to start the scan. The scan may take several minutes to complete, so please be patient.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt


In your next reply, please include:
  • Security Check log file
  • MiniToolBox log file
  • Malwarebytes log
  • SystemLook log
  • How's the computer running now? Please provide a detailed description any remaining problems, detailed word-for-word error messages that you are receiving, and/or screenshots of strange behavior.

Edited by jntkwx, 26 July 2011 - 11:17 AM.

Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users