explorer.exe virus W32:Malware virus

Viruses and worms
1

Today avista said that I had the following virus (twice) and that it could not be repaired because the file is read-only. I am not sure what to do. How can I remove this virus. I’m sorry if this might seem obvious but I am a novice as far as this is concerned.

2
avista
you mean avast!

Try this

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always run update before you scan so you have the latest database
click on the remove selected button to quarantine anything found
if anything is found you may post the scan log here

report back…

3

Download Hijackthis and select do a system scan and savelog file.

Then, after it finishes the thing, DON’T DO ANYTHING AND PASTE IT’S CONTENTS IN YOUR NEXT POST.

Download HijackThis Here: http://www.trendmicro.com/ftp/products/hijackthis/HijackThis.exe

Edit: Pondus beat me. :o

4
Edit: Pondus beat me.
very fast broadband line ;D
5

@Pondus
At least I looked up the information. ::slight_smile:

@Jmelaniehunt
He means to do a full scan with MBAM (MalwareBytes AntiMalware).

I know what your doing, Jmelaniehunt, your looking at this topic at the exact second.

6

Wait, she replied.

7

I’m not sure what you want me to do but am enclosing the file you requested. I did not ditch you and he is a she (Melanie. Oops how do I insert the notepad file?

8

OK dum-dum figured it out.

9

Oh, sorry. bricked :-X

10

I did a full scan with MalwareByte and removed a couple of viruses. I then did a scan with Avast! and it still says there is a virus on explorer.exe. Also I am using Windows 7 and when I try the shortcut for My Computer (at the bottom of the page) I am not able to do it and avast! says that “Threat has been detected” Thanks for your help

11

On reading my e-mail you might have misunderstood. I was referring to myself as a “dum dum”

12

Is anybody able to help me with this problem, please.

13

I am still looking for a solution to this problem. I have checked all sorts of forums and they all have different suggestions which involving changing the registry but I do not want to do this unless I am sure.

14

Follow this guide form our expert malware remover Essexboy
http://forum.avast.com/index.php?topic=53253.0

To avoid using multiple post with copy and paste you have to attach the log`s
Lower left corner: Additional Options > Attach ( OTL.Txt and Extras.Txt. and Malwarebytes scan log )

15

I’m sorry but I am not sure what you want me to do. I already read the guides yesterday and tried to follow them. Also I have run Malwarebyte several times and it does not show this virus. However the virus is still appearing on Avast! I am using Windows 7. Also I am unable to use the short-cut for My Computer. I posted the Hijack this yesterday. I have just updated it and am posting it again. Any help you can give would be greatly appreciated.

16

If you read the guide by Essexboy, you see that there is a program called OTL…

Run OTL and it will produce the log`s that Essexboy like to have…OTL.Txt and Extras.Txt.

then you post them as attahments

17

I clicked on OTL and it took me to this website http://http//oldtimer.geekstogo.com/OTL.exe where I got a message from Internet Explorer saying that they could not display the page. Do you know of another place where I can download the file? Sorry but nothing seems to be working for me.

18

This is just what I found, it could be wrong though so don’t remove anything until we’re positive.

Could Be Bad:
C:\Windows\System32\igfxpers.exe (http://www.bleepingcomputer.com/startups/igfxpers.exe-23118.html)
O4 - HKLM..\Run: [Persistence] C:\windows\system32\igfxpers.exe

FROM YAHOO INC.
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

ADWARE (OPTIONAL TO REMOVE)
O2 - BHO: ALOT Toolbar Helper - {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} - C:\Program Files\alot\bin\BHO\alotBHO.dll
O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll

Looks Suspicious:
O4 - HKCU..\Run: [efhlsdok] C:\Users\Hunt\AppData\Local\Temp\tjxexdgre\ywdciudlanw.exe

O4 - HKCU..\Run: [avsi] C:\Program Files\Antivirus IS Basic\avsi.exe /tray

Edit: Same here, the sight might be down.

19

Essexboy have posted 3 download links there…

Have PM him so he is on the way…

20

Did some research, you got this virus:
http://www.sophos.com/security/analyses/viruses-and-spyware/trojdelfezz.html