« previous next »
Pages: 1 [2]   Go Down

Author Topic: Win32:Malware-gen: Avast keeps finding this malware  (Read 12272 times)

0 Members and 1 Guest are viewing this topic.

luisisrael

  • Guest
Re: Win32:Malware-gen: Avast keeps finding this malware
« Reply #15 on: October 17, 2011, 03:14:38 PM »
Hi Essexboy,

After you helped me elimitaning this win32 virus it somehow appeared again (so maybe it was just hidden).
I noticed you were out for a while (from 28th till 08th October) so I waited till now to write again.

Just like before, Avast from time to time finds this file DESKTOP.INI infected by Win32:Malware-gen.

But now from time to time Avast blocks automatically the activities of this Win32 virus and shows the message that a Threat was Detected, like this:

C:\Windows\assembly\tmp\800000c0.sys -> Win32:Malware-gen tryed to create or infect this file (and was stopped by Avast).

Also like before. After I scan and exclude the infected Desktop.ini there comes some clean logs. And then again the virus reappears.

How should I proceed?
Is it possible that this is a false positive?

Thank you

Luis Santiago Israel
Logged

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89032
  • No support PMs thanks
Re: Win32:Malware-gen: Avast keeps finding this malware
« Reply #16 on: October 17, 2011, 04:17:29 PM »
It may have been as a result of how you got infected in the first place rather than this one being hidden.

So you should proceed as before, Download the latest OTL version, Run OTL and attach the logs and essexboy will take a look at them..
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32:Malware-gen: Avast keeps finding this malware
« Reply #17 on: October 17, 2011, 08:57:28 PM »
You have a choice of two possible infections here either zero access or conserv dependant on which it is will determine my approach

OTL will let me know which it is

Quote
After I scan and exclude the infected Desktop.ini
This is part of the infection
Logged

luisisrael

  • Guest
OTL log part 1
« Reply #18 on: October 18, 2011, 10:59:38 PM »
Hello Essexboy,

follow attached OTL log - part 1
Logged

luisisrael

  • Guest
part 2 - extras
« Reply #19 on: October 18, 2011, 11:01:50 PM »
log part 2 - Extras
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32:Malware-gen: Avast keeps finding this malware
« Reply #20 on: October 18, 2011, 11:05:37 PM »
I can see no sign of it there - lets do one further run with combofix, although I feel it will find nothing

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1
Link 2
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
  • Double click on ComboFix.exe & follow the prompts.
  • Accept the disclaimer and allow to update if it asks




  • When finished, it shall produce a log for you.
  • Please include the C:\ComboFix.txt in your next reply.[/b]
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
Logged

luisisrael

  • Guest
ComboFix log
« Reply #21 on: October 18, 2011, 11:29:30 PM »
Combofix log attached.
the computer is working normally.

ahoj
Luis
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32:Malware-gen: Avast keeps finding this malware
« Reply #22 on: October 19, 2011, 07:33:50 PM »
Just an ADS there which appeared to be from your bank - but it is something I will bear in mind next time I see it

Once you are happy run the cleanup routine again
Logged
Pages: 1 [2]   Go Up
« previous next »