Wie geht es weiter: Meldung Zugriff auf Webseite blockiert

[BastianS]

It is interessting, why delet your avast my files?
And my does not?

[essexboy]

No idea which I would be interested to find out

[BastianS]

Now you should see them via dropbox. Right?

[essexboy]

Thanks I now have it so you can delete them

[BastianS]

Delete them in dropbox AND computer?

[essexboy]

Unless you wish to keep them    I would recommend deletion though

[essexboy]

I have now opened the JS file and tried to decode it..  But I feel I will need to let someone else have a look at it

[BastianS]

ok. if it will help to identify the malware better, you should do that. or is that a problem?

[essexboy]

Nope, I know some very clever people, I will pass it around to them

[BastianS]

Hello,
i want to know, if there is something new you can tell me about the situation.
Is avast now able to detect AND to delete the malware? Or is there a working way to do that?

This is our actual situation: A friend of mine has copied the pictures to her laptop. Of course ( :-( ) she has now the malware on it.
I've got two other devices (a stick and a sd-card) with pictures from this trip and i want to have those. I do not dare to copy them to my PC, because there will me the malware on them.
What is your advice to do?

[essexboy]

Aye this malware changes every time it runs thereby making it hard for an AV to detect

Run McShield as that has now the ability to disable the malware

Download McShield to your desktop and install
It will initially run a scan and show the result as a toaster by the system clock
Then in the control centre select scanner and tick unhide items on flash drives

Plug in the drive(s)/Card and McShield will start a scan

Then get the log which will be here :

Start > all programs > MCShield > logs > all scans

And post that

Then run the OTL fix and follow with a fresh scan

[BastianS]

OK, i 've inserted a sd-card by running McShield.
This is the Log file output:


>>> MCShield ::Anti-Malware Tool:: v 2.6.3.21 / DB: 2013.6.2.1 / Windows 7 <<<


03.06.2013 17:03:11 > Datenträger P: - Scan gestartet (keine Bezeichnung ~945 MB, FAT Datenträger )...


> P:\RECYCLER
> P:\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665
> P:\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx (MD5: 79b72bf0e8c72e0bb6c1bcf26cac43e3)

>>> P:\Recycler - Schadsoftware (Ordner) > Löschung fehlgeschlagen.


=> Schädliche Dateien  : 0/1 gelöscht.
=> Schädliche Ordner   : 0/2 gelöscht.

____________________________________________

::::: Scandauer: 2 41Sek :::::::::::::::::::
____________________________________________

So it was able to detect the malware but could not destroy it.

I did not understand wich OTL fix i have to run.
Should i do a Quick Scan or what do you mean?

If you  remember, i'm not versed in thinks like that but last time you was so helpful to me.
So please, be patient with me.

[essexboy]

My apologies that last line should not have been there

McShield has now deleted the bad files and the SD card should now be safe

Did the malware get blocked from running on your computer

[BastianS]

There is a warning from avast, that a file has been blocked. But the path to the file is McShield!

And McShield was NOT able to delete the files! It has only detected, where the malware is (two files).

[essexboy]

Are you able to manually delete that folder from the card