Win32:MBRoot-J

Viruses and worms
21

There was no indication of mebroot on your logs

But for peace of mind ;D

Please read carefully and follow these steps.

[*]DownloadTDSSKiller and save it to your Desktop.
[*]Extract its contents to your desktop.
[*]Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

http://i1224.photobucket.com/albums/ee362/Essexboy3/TDSSKiller%20shots/TDSSKillermain.png

[*]If an infected file is detected, the default action will be Cure, click on Continue.

http://i1224.photobucket.com/albums/ee362/Essexboy3/TDSSKiller%20shots/TDSSKillerMal-1.png

[*]If a suspicious file is detected, the default action will be Skip, click on Continue.

http://i1224.photobucket.com/albums/ee362/Essexboy3/TDSSKiller%20shots/TDSSKillerSuspicious.png

[*]It may ask you to reboot the computer to complete the process. Click on Reboot Now.

http://i1224.photobucket.com/albums/ee362/Essexboy3/TDSSKiller%20shots/TDSSKillerCompleted.png

[*]If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
[*]If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of “TDSSKiller.[Version][Date][Time]_log.txt”. Please copy and paste the contents of that file here.

22

okay thank you, i wil do it tomorrow at the “infected” computer and let you know.

23

No problem, although as I say the original infection appears to have been removed by Combofix

24

I have runned the task killer (see results in the attached files)
then i runned avast (full scan and start up scan)
Result: no viruses found!

runned the fcleaner again, but still finds something

[15-09-2011 10:42:30] FCleaner v1.5.0.0 Loading…
[15-09-2011 10:42:30] Mebroot Infection Found!
[15-09-2011 10:42:30] FCleaner has detected malware on your system!
[15-09-2011 10:42:30] Please press the “Clean” button to remove the malware
[15-09-2011 10:43:08] Cleaner finished! …

(see attached file)

i think my computer is clean now, and fcleaner is wrong! ???

25

Run TDSSKiller again please and could you post the log

26

see attached file

27

again (ANSI) instead of Unicode

28

Methinks Fcleaner is providing a false positive, how is the computer behaving anything weird or unusual ?

29

no computer seems to work normally

30

Try an update on the Fcleaner and then re-run it