Removed several infections - is my system now clean?

Viruses and worms
1

Hi everyone,

Lately I was having trouble with my computer. Watching NHL Gamecenter videos kept intermittently freezing my computer, and refreshing twitter’s website was also incredibly laggy. I was using Avira then. I ran a scan and it didn’t find anything. I wasnt satisfied, so I ran malwarebytes and got this:

Files Detected: 4
C:\Users\Owner\Local Settings\jdvywlf.exe (Trojan.FakeAlert) → Quarantined and deleted successfully.
C:\Users\Owner\Local Settings\nzrkctjgxd.exe (Trojan.FakeAlert) → Quarantined and deleted successfully.
C:\Users\Owner\Local Settings\Application Data\jdvywlf.exe (Trojan.FakeAlert) → Quarantined and deleted successfully.
C:\Users\Owner\Local Settings\Application Data\nzrkctjgxd.exe (Trojan.FakeAlert) → Quarantined and deleted successfully.

I ran it again, and all was clear, i was still getting problems, however.

I uninstalled Avira, and installed Avast.

I ran an avast full system scan, and it found the following:
JS:Downloader-BHL [trj]

Removed it, and told it to run a boot scan.

Ran boot scan, and it found four more infected files:
PUP:Win32:KillApp-W
Java:Downloader-AO [expl]
Java:CVE-2011-3544-ET [expl]
Win32:Malware-gen

I moved those to the chest. Am I ok now? Is there anything more I can do to make sure?

2

Hi canuckmania, and welcome to the forum. :slight_smile:

The description of the files found with MalwareBytes, “Trojan.FakeAlert” alarms me.
Was there ever a Fake antivirus on your computer?

Also, if you want to be sure that your virus-free, you can follow these instructions here:
http://forum.avast.com/index.php?topic=53253.0

and attach logs in your next post for a qualified removal expert to check them. :wink:

3

I’m trying to upload my logs, but it’s saying the upload folder is full. Any ideas?

4

you only have 200kb…so it is possible that you dont get all logs in one post

PUP:Win32:KillApp-W
PUP is not virus....but a warning that you have a program that can be used for good or bad if abused is this a hp computer ? is this the the file detected (c:/hp/bin/endprocess.exe) ?
5

the logfiles add up to 64kb, and it still isn’t working

… even the 1kb Malwarebytes log on its own isn’t working

and yes, I have an HP… I read up on killapp.exe, I should be safe to restore it, right?

6
and yes, I have an HP... I read up on killapp.exe, I should be safe to restore it, right?
yes

if you have problems attaching logs use www.mediafire.com and post the download link here

7

http://www.mediafire.com/?o55wv555k6bq2ab

http://www.mediafire.com/?fge3wj2ymnzx05o

here they are

8

you should have uploaded the Malwarebytes log where it detected the infection…not the clean log :wink:
and also aswMBR log…

9

haha, fair enough

http://www.mediafire.com/?33pe3d6n7x9ye0c

10

Are you experiencing any problems ?

11

and just a note…
the clean log you posted had scan date today…but database from yesterday…
always hit the update button before you start a scan. Malwarebytes have released 7 updates today :wink:

12

It seems like my original problems have gone away. Though I’m still somewhat paranoid that there’s a trojan lurking somewhere… I hope Avast and Malwarebytes didn’t miss anything

13

here’s the aswmbr log

http://www.mediafire.com/?d6mvsecc29bxtho

14

MBR and logs look good ;D