fake AV not detected by avast 6.0.1203

Viruses and worms
1

http://www.virustotal.com/url-scan/report.html?id=9445e5acf3faaddd08ea4929ee9a40c6-1311244915

i couldn’t remove it completly , it remains pertially active and has changed some settings of my system , when i try to open an .mp3 file i get this error “Failed to execute the server”

2

VirusTotal - BestSpywareScanner_Setup.exe - 3/43
http://www.virustotal.com/file-scan/report.html?id=15508a6ef31de71353a2d34d0ebad682f0c0d92d53cb296bc828dde882a4e0b4-1311252122

and not detected by Malwarebytes or Superantispyware

will upload sample :wink:

3

NORMAN detect the dropped file as W32/Witkinat.O

so you may try Norman Malware Cleaner and see if that will clear it
http://www.norman.com/downloads/malware_cleaner/en-us?utm_source=frontpage&utm_medium=flash&utm_campaign=malwarecleaner

if no success with that, wait for Malwarebytes update and run that
they are working on it now http://forums.malwarebytes.org/index.php?showtopic=90238

4

ok i’ll try and post results

5

OBS: I see DrWeb detect it so DrWeb CureIT should remove it

Dr.Web CureIt! http://www.freedrweb.com/cureit/?lng=en
How Do I Use Dr.Web CureIt!? http://www.freedrweb.com/cureit/how_it_works/?lng=en

6

now i am scanning with windows defender and it detected somthing, waiting for the scann to end … then i’ll try dr.web

7

:-\ tryed everything and couldn’t fix the damage caused to my system : ( can’t launche windows mediaplayer , folders opens in a new window when i double click on them … )

is there anyway to fix the system without formating ??

8

Do please log file utility HiJackThis
http://www.filehippo.com/download_hijackthis/

Do please log file utility HiJackThis log and place on the site.

Thank you.

9

You scanned the DrWeb?

10

nevermind , i finaly reinstalled windows 7 … thanx for ur help :slight_smile: