Author Topic: WIN 32 ALISA MALWARE!  (Read 1502 times)

0 Members and 1 Guest are viewing this topic.

WIN 32 ALISA MALWARE!
« on: February 06, 2018, 09:58:30 PM »
 Hey please help me i scanned my computer and i found virus win 32 alisa but i deleted it next restart it found it again HELP

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: WIN 32 ALISA MALWARE!
« Reply #1 on: February 06, 2018, 11:00:36 PM »
Post screenshot of Avast message

Follow instructions here >>  https://forum.avast.com/index.php?topic=194892.0


Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: WIN 32 ALISA MALWARE!
« Reply #2 on: February 07, 2018, 04:36:27 PM »
Do what Pondus said please. FRST log files are the critical logs Sass Drake (Or another team member) will need.

Alisa is a file infector, so do NOT move any files to or from your system unless someone specifically tells you to. This way you don't risk infecting other systems. (Posting your *.txt files is the exclusion here.)

Avast! will not remove Alisa most likely because it's constantly modifying and running itself. The recurring notices would imply that Alisa has successfully run.

In your search bar on your system, type "%WINDIR%" - without the quotations, and in that directory, find the programs:

Notepad.exe
winhlp32.exe
regedit.exe

Upload them to www.virustotal.com and put the scan result link for each in your next reply. (This files are modified by Alisa)
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.