Author Topic: LNK:Runner! Over and over again!  (Read 22679 times)

0 Members and 1 Guest are viewing this topic.

Offline dzenan

  • Newbie
  • *
  • Posts: 16
LNK:Runner! Over and over again!
« on: July 11, 2011, 12:28:44 PM »
Please someone, anybody.. Have headache because off that..

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 63777
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: LNK:Runner! Over and over again!
« Reply #1 on: July 11, 2011, 12:32:49 PM »
 ???
Win 8.1 [x64] - Avast PremSec 20.3.2402.Beta#1 [UI.506] - CC 5.65 - EEK - Firefox ESR 68.7 [NS/AOS/uBO/PB] - TB 68.7 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline dzenan

  • Newbie
  • *
  • Posts: 16
Re: LNK:Runner! Over and over again!
« Reply #2 on: July 11, 2011, 12:41:37 PM »
My avast (free edition) notice me constatly about detecting infection LNK Runner.. If anyone has a solution..

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 63777
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: LNK:Runner! Over and over again!
« Reply #3 on: July 11, 2011, 12:42:52 PM »
Which shield..?
Can you post a screenshot..?
Win 8.1 [x64] - Avast PremSec 20.3.2402.Beta#1 [UI.506] - CC 5.65 - EEK - Firefox ESR 68.7 [NS/AOS/uBO/PB] - TB 68.7 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3060
Re: LNK:Runner! Over and over again!
« Reply #4 on: July 11, 2011, 02:48:37 PM »
Possibly a stuxnet infection. This happens if you have not updated your windows.

First use this tool: http://www.malwarecity.com/community/index.php?app=downloads&showfile=12 and click options > select full system scan and remove the malware found, if required restart.

Do a full system scan using avast. If anything is found, move it to chest.

Then, update your windows by going to http://windowsupdate.microsoft.com/

Offline dzenan

  • Newbie
  • *
  • Posts: 16
Re: LNK:Runner! Over and over again!
« Reply #5 on: July 11, 2011, 03:00:47 PM »
tnx.. will try.

Offline dzenan

  • Newbie
  • *
  • Posts: 16
Re: LNK:Runner! Over and over again!
« Reply #6 on: July 13, 2011, 09:48:29 AM »
Possibly a stuxnet infection. This happens if you have not updated your windows.

First use this tool: http://www.malwarecity.com/community/index.php?app=downloads&showfile=12 and click options > select full system scan and remove the malware found, if required restart.

Do a full system scan using avast. If anything is found, move it to chest.

Then, update your windows by going to http://windowsupdate.microsoft.com/

Didn't help..
Avast constatly notice me : "Malwere blocked"... Infection: LNK:Runner..
Full scan in safe mode detected win32.sality.gr, moved in chest..
But again, there is notification :"Malwere blocked"... Infection: LNK:Runner..

But, thanks anyway.. ;-)
I've had enough of this
Seems that format is only option

Offline dzenan

  • Newbie
  • *
  • Posts: 16
Re: LNK:Runner! Over and over again!
« Reply #7 on: July 13, 2011, 12:51:17 PM »
If someone have idea for resolve my problem, before i start formating? Realy hate that..

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 63777
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: LNK:Runner! Over and over again!
« Reply #8 on: July 13, 2011, 12:56:41 PM »
If someone have idea for resolve my problem, before i start formating? Realy hate that..

Avast version..??
OS..??
Did you run a boot time scan with avast! yet..??
Win 8.1 [x64] - Avast PremSec 20.3.2402.Beta#1 [UI.506] - CC 5.65 - EEK - Firefox ESR 68.7 [NS/AOS/uBO/PB] - TB 68.7 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline dzenan

  • Newbie
  • *
  • Posts: 16
Re: LNK:Runner! Over and over again!
« Reply #9 on: July 13, 2011, 01:06:31 PM »
If someone have idea for resolve my problem, before i start formating? Realy hate that..

Avast version..??
OS..??
Did you run a boot time scan with avast! yet..??

Yes, I did.. Nothing detect.. But first, i had run full scan with avast in the safe mode.. Found over 90 Win32.Sality-gr, moved to chest and after that i was run boot time scan and found nothing.. i hoped that is it..
But no.. When I started windows in normal mode, after few minutes, avast blocked malwer..Again! Show infection LNK:Runner..

Sorry, my english is so bad.. :)

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 63777
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: LNK:Runner! Over and over again!
« Reply #10 on: July 13, 2011, 02:02:23 PM »
Do you want to dig deeper..??
If so, I'll ask essexboy to join this topic.
Win 8.1 [x64] - Avast PremSec 20.3.2402.Beta#1 [UI.506] - CC 5.65 - EEK - Firefox ESR 68.7 [NS/AOS/uBO/PB] - TB 68.7 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline dzenan

  • Newbie
  • *
  • Posts: 16
Re: LNK:Runner! Over and over again!
« Reply #11 on: July 14, 2011, 11:21:32 AM »
Do you want to dig deeper..??
If so, I'll ask essexboy to join this topic.

ok

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 63777
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: LNK:Runner! Over and over again!
« Reply #12 on: July 14, 2011, 12:38:18 PM »
Do you want to dig deeper..??
If so, I'll ask essexboy to join this topic.

ok

Ok, he is informed.
Good luck..!
Win 8.1 [x64] - Avast PremSec 20.3.2402.Beta#1 [UI.506] - CC 5.65 - EEK - Firefox ESR 68.7 [NS/AOS/uBO/PB] - TB 68.7 - ASB/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40631
  • Dragons by Sasha
    • Malware fixes
Re: LNK:Runner! Over and over again!
« Reply #13 on: July 14, 2011, 06:48:54 PM »
OK lets see what is hiding

To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTS  to your Desktop
  • Close ALL OTHER PROGRAMS.
  • Double-click on OTS.exe to start the program.
  • Check the box that says Scan All Users
  • Under Additional Scans check the following:
Reg - Disabled MS Config Items
Reg - Drivers32
Reg - NetSvcs
Reg - SafeBoot Minimal
Reg - Shell Spawning
Evnt - EventViewer Logs (Last 10 Errors)
File - Lop Check

  • Under the Custom Scan box paste this in

%USERPROFILE%\..|smtmp;true;true;true /FP
%SYSTEMDRIVE%\*.exe
/md5start
volsnap.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
CREATERESTOREPOINT


  • Now click the Run Scan button on the toolbar.
  • Let it run unhindered until it finishes.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Please attach the log in your next post.

THEN

Download aswMBR.exe ( 567KB ) to your desktop.
 
Double click the aswMBR.exe to run it
 
Click the "Scan" button to start scan

 
On completion of the scan click save log, save it to your desktop and post in your next reply


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40631
  • Dragons by Sasha
    • Malware fixes
Re: LNK:Runner! Over and over again!
« Reply #14 on: July 15, 2011, 09:36:09 PM »
 ???