Boot Scan Found Virus

Viruses and worms
1

I just did a Clean Install on my Windows 7 64-bit computer and after reinstalling all my programs I ran a Boot Scan and to my shock I have a virus. I had the Boot Scan set to Delete anything found but apparently it was unable to do so and I guess there is no second option to Move To Chest;

Do I just need to run another Boot Scan and set to Move To Chest and this should take care of the Virus or could I have a more serious issue? Below is the Log Report:

2

put the mouse pointer on the vertical bar just in front of “severity” and dragg sideways so you can see the full file path…post new screenshot

3

Ok hope this helps!

4

googling that program name…supersysteminspector… give some hits related to malware

run a quick scan with malwarebytes. http://forum.avast.com/index.php?topic=53253.0
the run OTL and attach the logs

i will notifie Essexboy so he can have a look, i guess he is in bed now so check back tomorrow

5

Ok thanks here’s a little more info in case it’s related. I use Carbonite to back up my computer so once I reinstalled all my programs I had one of their Techs help me with the Restore. He had Carbonite Restore the “Users” folder to my desktop which included both my User Account and my wife’s User Account. Today I restored just a few select folders Music, Documents, etc. for both of our User Accounts and then ran the Boot scan afterwards.

I don’t see an option to save as ANSI format whatever that is?

6
I don't see an option to save as ANSI format whatever that is?
well you did correct....if you had done it wrong the logs would look like chinese

it over midnight here in europe now so i guess all the removal experts are in bed now
check back tomorrow after work hours, that is usuall when they are here

7

Hi all I can see there are a few adware entries are you experiencing any problems ?

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
FF - prefs.js..extensions.enabledAddons: %7B987211C6-B504-4ab2-90BF-60CC49808D42%7D:1.31
[2013/04/02 22:05:09 | 000,039,177 | ---- | M] () (No name found) -- C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\h8wladj8.default-1364861752199\extensions\{987211C6-B504-4ab2-90BF-60CC49808D42}.xpi

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

8

Essexboy yeah apparently I have/had something I wasn’t sure if it was a virus or spyware since Avast didn’t handle it with my Boot Scan.

9

Those two come under the heading of PUP (potentially unwanted programme) It was pricedrop stuff

Any further problems ?

10

No my computer never did act up actually if I hadn’t ran a Avast Boot Scan I would have never known I had something then got worried when Avast didn’t take care of it… can you tell me what I had and where I probably got it since I just did a Clean Install? Thanks!

11

In all probability it was bundled with one of the programmes that you had downloaded, that is how the vast majority get there

To remove OTL run it and press the cleanup button

12

Just a couple more questions I now see XMarks is asking me to sign-in and run a sync again like you do when you first use the Firefox Add-On so don’t know if you removed it with your script but I’m assuming it’s still safe to use been using for years?

If I ran a Avast boot Scan again I’m assuming it would show a clean computer correct?

13

That may have been the unknown extension… I.e. it was not on the known database of Mozilla add ons

A boot scan should come up clean

14

Many thanks essexboy!!!