Need help for recurring Malware every 4 to 5 mins

Viruses and worms
1

The past few days I had several blue screens of death. I decided then today to see if it may be due to a virus and deleted McAfee and installed avast. I tried several things today, including downloading Microsoft’s antivirus thing, but all it did was crash my computer upon rebooting over and over again. I went into repair mode and was able to log back in the computer. I reinstalled avast and still kept coming up with the same 3 malware over and over. If I could have some help it would be much appreciated. I noticed some of the logs you all ask for so they are on here as well.

2

You dont say what and where avast detect?

Also attach malwarebytes log…

Malware removers are notified…

3

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run
To disable MBAM
Open the scanner and select the protection tab
Remove the tick from “Start with Windows”
Reboot and then run OTL

http://i1224.photobucket.com/albums/ee362/Essexboy3/mbamstop.jpg

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:Files ipconfig /flushdns /c C:\windows\Installer\{6720a1e7-7ad5-b2e4-e40a-a3977d642cd2} C:\Users\Christopher\AppData\Local\{6720a1e7-7ad5-b2e4-e40a-a3977d642cd2}

:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]


[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

4

Sorry, for not posting the other information before.

The three that kept popping up every 4 to 5 mins was:
name of the first one was 00000001.@ description was Win32:Malware-gen in the registry {6720a 1e7-7ad5-b2e4-e40a-a3977d642cd2}\U
name of the second one was 80000000.@ description was Win32:Malware-gen in the registry {6720a 1e7-7ad5-b2e4-e40a-a3977d642cd2}\U
name of the third one was 800000cb.@ description was Win32:Trojan-gen in the registry {6720a 1e7-7ad5-b2e4-e40a-a3977d642cd2}\U

When I tried using OTL this past time, the computer froze during the creation of a restore point. I re-ran the program minus the creation of a restore point. I will also post that information here. However, after running the OTL program, avast has stopped the popups talking about the malware that it was telling me about every 4 mins.

Next when I tried ComboFix, I ran into a major problem and I could not load windows without the screen going blue. I tried multiple times, so I went to the restore point that ComboFix created to right before the process started. ComboFix did claim that Norton was still being ran and I do not know where it is at.

It is working better now though after the OTL.

5

Download the Norton removal tool from here and run https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?docid=20080710133834EN&product=home&pvid=f-home&version=1&lg=english&ct=us

I believe that the service file is infected and combofix normally kills that for me

So once you have finished with the Norton tool
Reboot to safe mode and try combofix again please

6

Alright, I was able to run through it today. However I still got the error that Norton Internet Security was still active even after running that program, but Combofix was able to complete the program. Right now everything is running a lot smoother.

7

That looks good - could you run a final OTL scan for me please…Select all users and quick scan

8

Here you go.

9

That looks good… What problems are outstanding ?