Avast WEBforum

Other => Viruses and worms => Topic started by: Ramesh83 on March 09, 2014, 05:58:00 PM

Title: Scared got virus attacked
Post by: Ramesh83 on March 09, 2014, 05:58:00 PM
Hi ..

I have been in dilemma over my pc has been infected by virus, spyware or malware since even i uninstall java it still show the java start up error .. dll run up error and further more the you tube video i play is being dragged with weird sound. And all the anti virus software is saying no virus but after i use Malwarebytes Anti-Malware its show every scan there is at at least 5 to 6 objects is infected and first scan is 236 infected files


Title: Re: Scared got virus attacked
Post by: Pondus on March 09, 2014, 06:05:13 PM
Attach malwarebytes logs also.....

Are those 5-6 detections detected as PUP?
Are they selected for removal before you click   remove selected   button?


Title: Re: Scared got virus attacked
Post by: magna86 on March 09, 2014, 06:29:19 PM
Hi,

Posted OTL log doesn't show the malware presence.

However, OTL shows the leftovers of PUP (https://helpdesk.malwarebytes.org/entries/23482988-What-are-the-PUP-detections-are-they-threats-and-should-they-be-deleted-) software and some installed toolbars ...etc. We shall run Zoek for additional checks & cleaning of that craps ...

Btw, Yes, as Pondus said, I do need Malwarebytes log (first one, not the last one) and aswMBR log as well.




Please download zoek.zip or zoek.rar by smeenk ((http://www.mcshield.net/personal/magna86/Images/Zoek_icon.png)) from here (http://hijackthis.nl/smeenk) or here (http://home.kpn.nl/stefsmeenk/zoek.exe) and save it to your Desktop.
Unpack the archive...
Quote
EmptyCLSID;
{95B7759C-8C7F-4BF1-B163-73684A933233};C
{ae07101b-46d4-4a98-af68-0333ea26e113};C
{95B7759C-8C7F-4BF1-B163-73684A933233};C
{ae07101b-46d4-4a98-af68-0333ea26e113};C
aaaailpifkkekipiachodfkfmgmiapmp;CHR
C:\Users\Ramesh\AppData\Local\Conduit;FS
C:\Users\Ramesh\AppData\Roaming\Babylon;FS
StartupAll;
C:\Users\Ramesh\Desktop\*.tmp;F
C:\Program Files\*.tmp;F
AutoClean;

Title: Re: Scared got virus attacked
Post by: Ramesh83 on March 11, 2014, 01:33:50 PM
here the report u have requested ..



Thanks
Ramesh
Title: Re: Scared got virus attacked
Post by: Ramesh83 on March 11, 2014, 01:39:58 PM
malware reports


Thanks
Ramesh
Title: Re: Scared got virus attacked
Post by: magna86 on March 11, 2014, 03:02:23 PM
Hi Ramesh83,


Now run this script for zoek and after reboot post me the fresh created log:


Quote
EmptyFoldersCheck;delete
C:\Users\Ramesh\AppData\Local\Conduit;FS
C:\Program Files (x86)\AskPartnerNetwork;FS
C:\Program Files (x86)\VNT;FS
AutoClean;
[HKEY_USERS\S-1-5-21-303746249-715003642-2574828861-1002\Software\Microsoft\Windows\CurrentVersion\Run];R
"APISupport"=-;R
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];R
"APISupport"=-;R
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run];R
"ApnTBMon"=-;R
"VNT"=-
Reboot;
Title: Re: Scared got virus attacked
Post by: Ramesh83 on March 12, 2014, 11:22:21 AM
here i the latest log
Title: Re: Scared got virus attacked
Post by: magna86 on March 12, 2014, 03:07:04 PM
Ok Ramesh83, this looks good.


Regarding to Java, just re-install and that will fix the thing.
Uninstall Java from Control Panel > Programs and Features and then go to officijal site, download installer and install the fresh Java.
http://www.java.com/en/


---     ----      ----      ----


Tell me, how is the computer behavior now?