Unable to take action upon found viruses?

Viruses and worms
1

I am running Windows 7 Ultimate Service Pack 1, 3.10GHz, 2.00 GB RAM.
Usually it’s speed is pretty good until recently it started to run really slowly, so I performed a few scans, one in Malware Bytes, which detected and successfully removed them. I also ran scans in Avast Ant-Virus Free, which detected a number of viruses also, however was unable to remove them all, as for many it simply didn’t give me an option to do so, and as you can see the list is quite long, all below what you can’t see are 'error: archive is password protected:

http://i1267.photobucket.com/albums/jj558/Hannah-Hoe/virusscan.png

Only a custom scan was able to detect them, the first two default avast scans failed to:

http://i1267.photobucket.com/albums/jj558/Hannah-Hoe/scanresults.png

So yeah, I’m now unsure of what to do. s:
And I’m paranoid about using this computer at the moment.

Help is much appreciated.

2

Hi So… Did you notice:
Process 3376 is mbam, residing in memory. I’m pretty sure that “men|” would expand to “memory”. What avast is detecting are signature strings that mbam is using. No cause for worry, but you should not have another antivirus resident when running a scan. Stop mbam, and avast will not detect those strings anymore.

The remainder are compressed files that are password-protected. Since avast does not know the passwords, it’s telling you it can only see gibberish in them. But, I must admit, I do not know if avast would know how to open .dds and .lua files if they are not password-protected.

Regards

3

So…,

A non-standard scan in Avast! will give strange results. I assume the scan marked above scanned memory, hence the mbam results (Malwarebytes).

Please post results of Malwarebytes log run just prior to running Avast! custom scan here in your next reply. What got removed/quarantined?

Attach all logs below in “Attachments and other options” link below the text box. Note allowed file types.

Always quarantine a file if it cannot be repaired or cleaned. Never delete. You may need that file later if found to be clean at a later time.

4

I stopped MalwareBytes and did the scan again, and it still picked them up.

I’m pretty sure this is the scan log, though I ran the scans at the same time, in hindsight, wasn’t the best idea…

5

Mbam log shows two files quarantined and deleted: $R4ZKV1Z.exe
$RWIQLXC.exe

First one does not exist, according to a Google search.

Second one gives a web site in Japan, analysis from zulu zscaler here: http://zulu.zscaler.com/submission/show/cb8884b77683a75446adf44e3ef5d5dc-1337657001

zulu does not detect anything here; Google search provided a link to this site with only one result.

I suggest submitting the two above files to virus total dot com here: https://www.virustotal.com/ where 40+ virus scanners will have a look at them.

As they were found in the Recycle Bin, question is, did you put them there? Paste the resulting url’s from each scan in your reply. You can restore these files (copy/paste) from quarantine in malwarebytes to your desktop to submit, throw away when done.

I see the mbam database version is from 5/12/2012, out of date in any case.

6

(cough)-keygen-(cough)

7
I stopped MalwareBytes and did the scan again, and it still picked them up.
because you have selected "scan memory" and if you search the forum you find a million cases

unless you have some special need or know something the avast guys dont know… use the default scan settings
so do not use the “scan memory” setting and problem is gone

files that can not be scanned, are just that, does not mean they are infected
avast is juste reporting a scan error and the reason why, no more no less

(cough)-keygen-(cough)
;)
8

Oh. So $R4ZKV1Z.exe is a keygen file? Oops! Live and learn.