2 files infected with VBS Flufferminer -D[Trj] detected

Viruses and worms
1

2 files same boot scan. Accompanied by a “Sun Java Console” addon in Internet Explorer that appeared today , prompting the scan. The Sun Java Console has no file or folder in “more information”. I have uninstalled Java and the “Sun Java Console” addon still remains.

c:\intel\logs\intelgfxcoin.log VBS Flufferminer -D[Trj] detected action successful
c:\windows\inf\setupapi.setup.log VBS Flufferminer -D[Trj] detected error: system can’t file the file // was an error initially , i . //deleted the setupapi.setup.logfile

I downloaded AdwCleaner.exe + aswMBR.exe + FRST64.exe

AswMBR.exe (once it reaches c:\program files ) crashes on my system (Win 8.1 64bit). even in Admin mode.

2

Hi,

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

C:\Users\Guy\jagex_cl_runescape_LIVE.dat
C:\Users\Guy\jagex_cl_runescape_LIVE1.dat
C:\Users\Guy\random.dat
C:\Users\Guy\AppData\Local\Temp
cmd: ipconfig /flushdns

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

3

here is the file

4

Do you still have a warnings? System is clean…

5

I will perform a full scan overnight. I’ll update tomorrow with any results.

6

Additional data I have confirmed it as an FP on my system … Uploaded to Avast

7

Avast found 2 more VBS Flufferminer -D[Trj] viruses in different files

http://i40.tinypic.com/dwoo42.png

Frustrated I downloaded Malwarebytes which found :

Files Detected: 1
C:\Users\Guy\AppData\Local\GOOGLE\CHROME\USER DATA\DEFAULT\File System\001\t\00\00000000 (PUP.Optional.OneClickDownloader.A) → Quarantined and deleted successfully.

I think this was the virus I was hunting for, as I was getting dialog boxes trying to save or open files on some websites for no apparent reason. Thanks for your help, have a great day.

8

P.S. Currently nether antivirus are detecting a virus at present.