Author Topic: bootscan in 64 bit???  (Read 4351 times)

0 Members and 1 Guest are viewing this topic.

dementedchord

  • Guest
bootscan in 64 bit???
« on: November 15, 2010, 07:17:13 AM »
when will this be available???

i suspect i have a problem... i've recieved email from friends concerning spam mail sent from my acct... avast doesn't find anything but a buddy suggested running spybot once to see if it picks up anything and it says it did...  5 pups... which it says cant be removed as they are loaded into mem and in usage at that time....any suggestions???thnx in advance... bob

btw here's what spybot found.. hope it helps...


--- Search result list ---
FunWebProducts: [SBI $51F213BA] Program directory (Directory, fixing failed)
  C:\Program Files (x86)\MyWebSearch\bar\

FunWebProducts: [SBI $9975C0B8] Program directory (Directory, fixing failed)
  C:\Program Files (x86)\MyWebSearch\bar\1.bin\

MyWay.MyWebSearch: [SBI $676B23CE] Program directory (Directory, fixing failed)
  C:\Program Files (x86)\MYWEBSEARCH\

MyWay.MyWebSearch: [SBI $F06432E0] Program directory (Directory, fixing failed)
  C:\Program Files (x86)\MyWebSearch\bar\1.bin

MyWay.MyWebSearch: [SBI $78882F84] Program directory (Directory, fixing failed)
  C:\Program Files (x86)\MyWebSearch\bar

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: bootscan in 64 bit???
« Reply #1 on: November 15, 2010, 07:56:23 AM »
Quote
when will this be available???
The plan is avast! 5.1 soon to be released for betatesting.
The bootscan is not something you should use for your weekly/monthly check, but is something you use when/if you have an infection that the normal scan detect but are not able to remove for whatever reason.....



Quote
btw here's what spybot found.. hope it helps...
spybot is no good, replace it with Malwarebytes

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always update before you scan so you have the latest database
click on the remove selected button to quarantine anything found
you may post the scan log here if anything is found

dementedchord

  • Guest
Re: bootscan in 64 bit???
« Reply #2 on: November 17, 2010, 01:14:56 AM »
thnx man appreciate the response... will give the other a try...

dementedchord

  • Guest
Re: bootscan in 64 bit???
« Reply #3 on: November 17, 2010, 05:34:03 AM »
hello again... it seems i may be zeroing ijn on the problem with your help....YEA!!! so after deleting spybot and downloading malwarebytes i ran it several times consecutively as to track any progress... the first time it said it found 21 items... and after rebooting i ran it again this time finding only one... it never did get rid of that last item as you can see from the last log... thnx again... bob

btw i have traced that file path and found it... i would have simply tried to delet it if i weren't chickenshit... afterall it says its an avast file...

last log file

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5129

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

11/16/2010 9:56:03 PM
mbam-log-2010-11-16 (21-56-03).txt

Scan type: Full scan (C:\|)
Objects scanned: 28881
Time elapsed: 6 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\Alwil Software\Avast5\chrome\ChromeInst.exe (Trojan.Startpage) -> Delete on reboot.

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: bootscan in 64 bit???
« Reply #4 on: November 17, 2010, 07:01:16 AM »
hello again... it seems i may be zeroing ijn on the problem with your help....YEA!!! so after deleting spybot and downloading malwarebytes i ran it several times consecutively as to track any progress... the first time it said it found 21 items... and after rebooting i ran it again this time finding only one... it never did get rid of that last item as you can see from the last log... thnx again... bob

btw i have traced that file path and found it... i would have simply tried to delet it if i weren't chickenshit... afterall it says its an avast file...

last log file

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5129

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

11/16/2010 9:56:03 PM
mbam-log-2010-11-16 (21-56-03).txt

Scan type: Full scan (C:\|)
Objects scanned: 28881
Time elapsed: 6 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\Alwil Software\Avast5\chrome\ChromeInst.exe (Trojan.Startpage) -> Delete on reboot.

I had MBAM detect that same file the other day as well, dont know why it started detecting this file all of a sudden but i decided to reinstall avast just in case something was wrong, also installed the new MBAM 1.50 beta which you can now add the avast program file to the ignore list.
« Last Edit: November 17, 2010, 07:03:46 AM by craigb »

dementedchord

  • Guest
Re: bootscan in 64 bit???
« Reply #5 on: November 17, 2010, 11:04:08 PM »
dig it... thnx for the help man... i apprecate it no end...

gillest

  • Guest
Re: bootscan in 64 bit???
« Reply #6 on: November 19, 2010, 05:14:06 PM »
thanks for the info