Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Trojan.FakeMS when running routine MalWareBytes Scan

  • Please log in to reply
1 reply to this topic

#1 FintoBelli


  • Members
  • 1 posts
  • Local time:03:45 PM

Posted 27 February 2013 - 08:42 AM

Just looking to see if this is completely cleared as I have had something similar in the past.


Ran MalwareBytes and got:



Files Detected: 2
C:\Users\<user>\7828645.dll (Trojan.FakeMS) -> Quarantined and deleted successfully.
C:\Users\<user>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk (Trojan.Ransom.SUGen) -> Quarantined and deleted successfully
Rand DSS and attached the logs


Attached Files

Edited by rotor123, 27 February 2013 - 08:46 AM.
Misread, OOPS

BC AdBot (Login to Remove)


#2 The Dark Knight

The Dark Knight

    The Magician

  • Security Colleague
  • 661 posts
  • Gender:Male
  • Location:Krypton
  • Local time:02:45 AM

Posted 01 March 2013 - 06:03 PM

Hello and welcome to BleepingComputer. I am The Dark Knight and will be assisting you. Please ask questions if anything is unclear. :welcome:


Please post the contents of logs, rather than attaching them, as it makes it easier to analyse.


Please follow these instructions to run ComboFix.exe. Please visit this webpage for download links and instructions for running this tool:


* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix (CF).

Please go here to see a list of programs that need to be disabled.

**Note: Do not mouseclick ComboFix's window while it's running. That may cause it to stall.**

**Note 2: If you get a message saying "Illegal operation attempted on a registry key that has been marked for deletion", please restart your computer.**

Please include the C:\ComboFix.txt in your next reply for further review.

If you make yourself more than just a man, if you devote yourself to an ideal...you become something else entirely. A legend, Mr. Wayne, a legend!

If I have helped you please consider donating to the Neuroscience Research Institute.

Posted Image
Posted Image

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users