Malware detected by Malwarebytes

Viruses and worms
1

This morning my wife’s laptop (Toshiba Z835 Ultrabook that she received for Christmas) booted into an indeterminate state. It looked like Avast! Internet Security was stalled and deactivated. Trying to repair it resulted in a series of 3 or 4 alert windows being displayed in succession. These are the usual Win7 (home prem 64) “are you sure you want to continue” alerts.

The computer was unusable, and I couldn’t re-enable Avast!, so I disconnected it from the Internet, uninstalled Avast! Internet Security, then reinstalled it (downloaded the installer on my computer and brought it over on a thumb drive). Also installed Malwarebytes the same way. After installation (and reboot) I ran a full Avast! scan which found nothing, and a full Malwarebytes scan which found the following:

Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Database version: v2012.01.26.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421

Files Detected: 3
C:\Users\fgailp\AppData\Local\Temp\0.9514407137081097.exe (Trojan.FakeAlert) → Quarantined and deleted successfully.
C:\Users\fgailp\AppData\Local\Temp\jar_cache570426640617528574.tmp (Trojan.FakeAlert) → Quarantined and deleted successfully.
C:\Users\fgailp\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\54532610-187f8b4b-temp (Trojan.FakeAlert) → Quarantined and deleted successfully.

Is there anything else I can do to ensure this has no further side effects, and that it doesn’t happen again?

Thanks,
f3

2

Follow the guide here, and attach the logs
http://forum.avast.com/index.php?topic=53253.0

Essexboy will then check the logs when he arrive tomorrow and see if everything was removed
if not he will remove it

Lower left corner: additional options > attach

3

Thanks.

I ran Malwarebytes again - log is attached.

Even though Malwarebytes found nothing more, I installed and ran OTL - logs attached.

An interesting thinkg happened when I tried to save the OTL logs - I could complete the save operation OK, but could never find the file. I finally copied and pasted the file contents into a Wordpad window and saved it as a text file. That seems a bit pathological to me.

4

where did you save OTL…as the logs are saved same place as OTL :wink:

Essexboy usually arrive here late UK time