No idea if I have a virus or not.

Viruses and worms
1

Malwarebytes Log:

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.08.07.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Joseph :: JOSEPH-HP [administrator]

Protection: Enabled

8/10/2012 4:04:57 PM
mbam-log-2012-08-10 (16-04-57).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 194659
Time elapsed: 2 minute(s), 40 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

And the aswMBR + OTL files there aswell. If I do have one, help? If I don’t, a simple post telling me I don’t is fine.

2

Oh yeah, might be worth mentioning that I’ve been hearing weird sounds after logging in.

3

\wrcPhisingStorage.json - What is that?

It isn’t a infected file but it is the last file scanned by my file system shield. Should I be worried or anything?

4
\wrcPhisingStorage.json - What is that?
where was it located.... in firefox ?

full file path

5

Yeah it was Firefox.

C:\Users\Joseph\AppData\Roaming\Mozilla\Firefox\Profiles\8y5kczb5.default\wrcPhishingStorage.json

It seems to be coming from when I pause and unpause YouTube videos. It could just be storing where I paused correct?

6

Bumpity for this to get seen, freaking out since I don’t know if I have a virus.

7

you have attached the logs… the malware removers are notified

they do this work here voluntarily, but also have work, family life, sleep, time zone to consider… so be patient

8

Okay, its just that I’m freaking out. I’m sorry for the spam and everything but I’d hate to lose this computer for some reason or another. I don’t think I do, but I tend to freak out when it comes to internet security…

9

I’d just like to ask, does that mean I have a virus or not?

10

Hi Pokesaver,

There is something you can do whilst awaiting help here. You can (I suggest) begin to back up your files you consider important; this will give you something constructive to do in the meantime. This should help ease your mind a little.

11

Hi all I can see is an old failed malware install attempt from last year… Could you elaborate on the weird noise

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF

:OTL [2011/12/15 19:14:52 | 000,010,268 | -HS- | C] () -- C:\Users\Joseph\AppData\Local\786687y7c168q428n153s8xbl4s1 [2011/12/15 19:14:52 | 000,010,268 | -HS- | C] () -- C:\ProgramData\786687y7c168q428n153s8xbl4s1

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]


[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

12

The sound occurs in about increments of 30 to 45 seconds, and happens after login. It doesn’t occur anytime after, which is the weird part. It just started after I reinstalled avast! to get my webshield to work, which still doesn’t. It might be a driver error, since I got a BSOD shortly after that.

13

I would also like to mention during the fix, it said “Windows has a critical error and needs to restart in one minute”. But it didn’t interrupt the fix whatsoever, so I think it was the fix itself that said that.

14

How did you uninstall Avast ? Did you use aswClear ?

15

Yes, I used aswClear and the Uninstall from Control Panel.

Any idea on the sound or are you beat too? And is my log coming back okay?

EDIT: I really feel like it’s a driver error. Any way for you to be sure?

16

Yes the logs look clear… To check the drivers out you can run a clean boot sequence

Step 1:

Start the System Configuration Utility
Click Start, click Run, type msconfig, and then click OK.
The System Configuration Utility dialog box is displayed.

Step 2:

Configure selective startup options
In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.
Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, click Restart to restart the computer.

Step 3: Log on to Windows

Now we get to the tedious part,:

If windows behaves itself then do the following

Restart MSConfig and select half of the disabled services and reboot

Is the problem still present ?

If Yes then deselect half of the services that you resumed and reboot

If no then select half of the remaining services and reboot

The intention here is to isolate the one service/driver that is causing the problem

17

I’m not the best with this stuff, what’s the System Configuration Utility? How do I get to it etc. I;m running Windows 7 if that helps at all.

Actually, I don’t feel safe disabling those programs. Even though I’m malware free just don’t feel safe. Sorry for your time. Thing is, never seen anyone else get this sound error after login.

18

It may be just an oddity on your system… No two systems are the same and what works for one may not work for the other

Click Start, click Run, type msconfig, and then click OK.
19

I’m good with the sound, its just an annoying bug I guess ^.^. Other than that, system is fine. I’m okay with dealing with this, it’ll just be a little while before I build my own gaming computer. Thanks for the help.

20

http://forums.mozillazine.org/viewtopic.php?f=7&t=2461535

the wrc files (i see them as clean blue spikes in File System Shield when I open firefox) are supposed to be from WebRep