Win32:access-pb and Win32: Malware-gen

[oblix13]

Hello,

A fews days ago I got this friendly "wirus" which doesn´t want to leave my computer.

I tried to follow the recommendations from "http://forum.avast.com/index.php?topic=53253.0" and here you have the results.

There are messages coming from Avast saying the computer has a infection. Messages are coming under 2 different names. "win32:ZAccess-Pb (Trj)", "Win32:Malware-gen",

I have run

- Malwarebytes' Anti-Malware: First time some infections, second time 0. I have attached the first report.
- OTL. Runned once. I have attached the 2 reports.
- ASWMBR: I tried to run it several times, but always an error is coming. I have attached an images showing the information before the error appears.

Hope somebody will be able to help my.

Cheers,

[Pondus]

if you ave problems running aswMBR try run it from safe mode

also run AdwCleaner and attach log

malware removers are notified. it may take hours before one arrive so be patient

[essexboy]

Hi there, to work

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:OTL
[2013/03/01 18:05:09 | 000,004,608 | -HS- | M] () -- C:\Windows\assembly\GAC_32\Desktop.ini
[2013/03/01 18:05:09 | 000,006,144 | -HS- | M] () -- C:\Windows\assembly\GAC_64\Desktop.ini

:Files
C:\Windows\Installer\{48605cae-215d-a3d5-0b04-f97f7539b8a7}

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1
Link 2
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

• Double click on ComboFix.exe & follow the prompts.
  
• Accept the disclaimer and allow to update if it asks

• When finished, it shall produce a log for you.
• Please include the C:\ComboFix.txt in your next reply.[/b]
  

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

[oblix13]

Thanks for yours responses.

Please find attached results from:

- AdwCleaner
- OTL (new report)
- Combofix

I tried to run aswMBR under safe mode, but the same error in coming up and the programme shut down automaticaly.

Cheers,

[Pondus]

your AdwCleaner log say search (Búsqueda) when you run it click delete button to delete the crap files

[oblix13]

Here you have!!

[essexboy]

How is the computer behaving now ?