80000000.@

Viruses and worms
1

My PC is infected with 80000000.@ virus (malware). Windows 7. Every 4-5 min Avast! reports that a new threat
is found and blocked. How to get rid of it? Please help.

2

Follow the steps here and attach the necessary logs to this thread ;D
http://forum.avast.com/index.php?topic=53253.0

3

If you need someone to look over your system please go here >> http://forum.avast.com/index.php?topic=53253.0 and then follow the directions for OTL, aswMBR and Malwarebytes. Once complete attach the logs created here and I can look them over.

I see Essexboy already posted for this just now. You are in great hands. :slight_smile:

4

Hi Jeff you can have this one, my keyboard needs to cool down ;D ;D ;D

5

;D ;D Ok no problem. Good to be back.

6

I need this too. Because OP didn’t post the stuff I will.

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.07.19.13

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
GChin :: PC-HOME [administrator]

7/19/2012 9:20:11 PM
mbam-log-2012-07-19 (21-20-11).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 211560
Time elapsed: 4 minute(s), 27 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Windows\Installer{3199730d-63e8-62a0-89ca-00825b570584}\n (Rootkit.0Access) → Quarantined and deleted successfully.
C:\Windows\Installer{3199730d-63e8-62a0-89ca-00825b570584}\U\00000008.@ (Trojan.Dropper.BCMiner) → Quarantined and deleted successfully.

(end)

7

Virus also appears as 80000064.@ and 80000032.@

8

@ xsekirei

Please start your own topic. :slight_smile:

Please visit the site located here. Follow the directions
for running OTL, aswMBR.exe and Malwarebytes and then attach the logs that are created to your next reply. :slight_smile: