:o
I ran Malwarebytes and Avast simultaneously after my computer crashed over a month ago. It detected one file, here are the results.
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 541230
Time elapsed: 5 hour(s), 2 minute(s), 6 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\Users\Dee Sanae\Downloads\applianflv.exe (PUP.BundleOffers.IIQ) → No action taken.
(end)
I am also attaching a screenshot of what avast results look like.
I am going to run OTL , please let me know what I should do.
Please visit the site located here. Follow the directions
for running OTL, aswMBR.exe and Malwarebytes and then attach the logs that are created to your next reply.
Please download ERUNT (Emergency Recovery Utility NT). This program allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed. **Remember if you are using Windows Vista as your operating system right-click the executable and Run as Administrator.
Run OTL.exe
[*]Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot when it is done
[*]Then run a new scan and post a new OTL log ( don’t check the boxes beside LOP Check or Purity this time )
I see that you have Malwarebytes already on your computer. Please open Malwarebytes, update it and then run a Quick Scan. Save the log that is created for your next reply.
Please run a free online scan with the ESET Online Scanner [i]Note: You will need to use Internet Explorer for this scan[/i]
[*]Tick the box next to YES, I accept the Terms of Use
[*]Click Start
[*]When asked, allow the ActiveX control to install
[*]Click Start
[*]Make sure that the options Remove found threats is NOT selected and the option Scan unwanted applications is selected.
[*]Click Scan (This scan can take several hours, so please be patient)
[*]Once the scan is completed, you may close the window Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner[b]log.txt
[*]Copy and paste that log as a reply to this topic
As a veteran of a fight with rootkit I can only suggest reformatting your hard drive NOW. I battled it for almost a week using my old antivirus program and malwarebytes. I finally threw up my hands, gave up and reformatted the hard drive after more and more viruses kept reappearing.
Two problems with rootkit. First; It buries a copy of itself deep in your system under a false file name. That makes it difficult, if not impossible to find, at least it was for me last year when this happened. After a certain amount of time that file activates and you have rootkit again.
Two; One of the things it does is open up a channel for other viruses, malware and such to enter. I found probably close to a hundred viruses on my computer over a period of five days, each time after I’d thought I might have finally cleared rootkit. Some of the ones I found were keystroke loggers and other programs to send personal information on my computer to some bad guy.
So, back up all your files. Rootkit allowed me to get all my registration numbers, save my bookmarks and such, then reformat. Most important: CANCEL ANY CREDIT CARDS YOU HAVE INFO ON IN YOUR COMPUTER! Also change all passwords to e-mail and financial sites asap.
I had one credit card’s info on my computer. I hesitated cancelling it in hopes they didn’t get the info. About 3 weeks after I reformatted they tried to use that card. Luckily the bank caught it, notified me and cancelled my card. I should have cancelled that card once I realized compromising viruses were on my computer.
They apparently tried to gain access to financial sites I deal with regularly, too. They didn’t seem to get in but those sites shut me out unless I went through additional security screening. Weird, when that stuff happens to you and not someone else.
C:\Program Files (x86)\VlcPlus\Extras\setup.exe a variant of Win32/Toolbar.Zugo application FFB196F7333422377F970A0BDE2B5623 I
C:\Users\Dee Sanae\Downloads\cnet_service-invoice-for-hourly-billing_zip.exe a variant of Win32/InstallCore.D application 70170F35984C8E3C18BB534017030675 I
C:\Users\Dee Sanae\Downloads\FCTBSetup.exe Win32/Toolbar.Zugo application 557413008733EAEBECAB0696CA8E4F4B I
