Jump to content

Malwarebytes

Trojan - VB.BFP. (is it new)


4 replies to this topic

#1
noknojon

    you know why ---

  • Honorary Members
  • PipPipPipPipPipPip
  • 5,588 posts
  • Gender:Male
I ran my usual weekly scans with M.B.A.M. , Spybot S & D , and AVG (free) - Only found a few cookies -
Then I ran a quick scan with Spyware Doctor and it showed a few infections of Trojan VB.BFP -
Is this a new infection as I have not yet seen it or heard of it -
I followed with full scans of M.B.A.M , rescanned with Spybot and still got no result -
Full scans of Spyware Doctor showed over 20 infections of this Trojan -
Spyware Doctor seems to be the ony one to pick this up - Is it a false reading, or is Trojan VB.BFP. a newer type of
infection not yet covered by the other programs ??
Any further info would be helpful - Thank you - :D
Just another private helper - (not a company man) -
When you don't have to worry about your computer anymore, you can start living again !

#2
Baz.

    Advanced Member

  • Experts
  • PipPipPip
  • 217 posts
  • Gender:Male
  • Location:London
It would help if you could show us where spyware doctor found these infections (which files or registry entries are being detected?)
Kind Regards,

Baz.

#3
noknojon

    you know why ---

  • Honorary Members
  • PipPipPipPipPipPip
  • 5,588 posts
  • Gender:Male
The infections were found in - (C:Volume Information\_restore) - section of the scan -
I did not get any other exact readings as I was not expecting to find these items at all -
I deleted them but I will redo the scan to see if there is any more information or any other items -
Thank you for the fast response -
Just another private helper - (not a company man) -
When you don't have to worry about your computer anymore, you can start living again !

#4
noknojon

    you know why ---

  • Honorary Members
  • PipPipPipPipPipPip
  • 5,588 posts
  • Gender:Male
On looking at the scan logs I have found that all of the items were in -
C:System Volume Information \_restore, and were listed from items
\RP156\A0057524.dll up to item \RP175\A0059103.dll -
I don't know if this is enough information for you so I will keep looking -
Thank you -
Just another private helper - (not a company man) -
When you don't have to worry about your computer anymore, you can start living again !

#5
noknojon

    you know why ---

  • Honorary Members
  • PipPipPipPipPipPip
  • 5,588 posts
  • Gender:Male
The new scan showed no new items, but I recalled that each infection would appear after
- \ snapshot\REGISTRY_USER_NTUSER - or a similar item, but always after \snapshot\REGESTRY\ - Followed by a REGISTRY item -
Just another private helper - (not a company man) -
When you don't have to worry about your computer anymore, you can start living again !





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us