Hi. Today I ran a boot time scan and ended up finding 2 infected files. Both seem to be “win32:smssend-IG” and it can’t be moved to the chest, repaired or deleted. Oddly enough, nothing is found when I google search it. I ran Malwarebytes and SuperAntiSpyware today as well and found nothing. Also note that the last boot time scan I ran was 3 days ago, and nothing was found then. Any advice or info is appreciated.
Here is the log.
12/21/2011 11:11 Scan of all local drivesFile C:\Documents and Settings\Andrew.DHZ34C71\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine\quarantine.db|>data Error 42125 {ZIP archive is corrupted.}
File C:\Documents and Settings\Andrew.DHZ34C71\Local Settings\Application Data\Google\Update\Download\youtubeuploader.msi|>Uploader.cab|>ShellEXE is infected by Win32:SMSSend-IG [Trj], Move to chest: Error 42111 {The operation is not supported for this type of archive.}, Move to chest: Error 42111 {The operation is not supported for this type of archive.}, Move to chest: Error 42111 {The operation is not supported for this type of archive.}, Delete: Error 42111 {The operation is not supported for this type of archive.}, Repair: Error 42060 {The file was not repaired.}
File C:\Documents and Settings\Andrew.DHZ34C71\Local Settings\Application Data\Mozilla\Firefox\Profiles\xt8bb0pc.default\Cache(20)\120D3EF4d01|>files.dat Error 42126 {RAR archive is corrupted.}
File C:\Documents and Settings\Andrew.DHZ34C71\Local Settings\Application Data\Mozilla\Firefox\Profiles\xt8bb0pc.default\Cache(8)\801AB65Dd01|>Tails\comic\5.jpg Error 42125 {ZIP archive is corrupted.}
File C:\System Volume Information_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP2150\A0389175.msi|>Uploader.cab|>ShellEXE is infected by Win32:SMSSend-IG [Trj]
Number of searched folders: 8015
Number of tested files: 433844
Number of infected files: 2
Thank you.