3 replies to this topic

[klochhead]

Thank you so much for viewing my question and for all of your help!

MY CPU is infected, and I need to connect with client computers today!

Background on virus:

Originally not detected by Shaw Secure. I first noticed when a popup appeared saying: Do you want to block this suspicious software?
Name: Win32.Brontok
Risk Level: High
Description: This worm spreads via the Internet as an attachment to infected messages. It sends itself to email addresses harvested from the victim machine.

I assume that this is not a "Security Center Alert" from Windows firewall as it says. It does not give an option to keep blocking, instead, enable protection or download a file to protect CPU.

Shaw Secure now detects that I have a virus. The first time, I chose quarantine, and Shaw said that it was unable to and renamed the file.

It detected it again, when I went into the file folder that I suspected had the infected file. I tried to quarantine it, but Shaw Secure said it was missing.

It detected it again this morning, also by going to a folder that I thought may have been infected, and it was actually just finishing up a moment ago. Then it came up to tell me an error, but something I typed in here closed my window when it popped up, oops. I think that it looked like the previous message, saying that the file was no longer there, but I will never know now.

I need something fast, and hiring a computer technician is not fast enough. The only posts in various forums that I see related to this virus used MBAM to clean it, and it appears to have worked! Is your program what they referred to as MBAM?

I do prefer to try things before I buy, and I have saw some members here discussing a free version. First of all, can this free version clean this virus? Second of all, where can I get it and is it safe to download while this virus is active on my CPU? Or should I go to another computer and save it to a disk?

How much does your full version cost? If I had your real time scanning, would you have been able to detect this virus right away? I wonder, because it seems odd that my current virus protection did not detect it. And, as with above, where can I get the full version, and should I download to a different CPU or can I download it to my infected computer?

Please Help ASAP! I need to work, and I am scared to send files to clients with an infected CPU!

Note: I have a file that was created for another forum, called attach.txt, but they haven't responded... This file appears to be some type of log, please let me know if it would help you help me, and I will attach it.

[NicKnayme]

klochhead, on May 9 2009, 08:50 AM, said:

Thank you so much for viewing my question and for all of your help!

MY CPU is infected, and I need to connect with client computers today!

Background on virus:

Originally not detected by Shaw Secure. I first noticed when a popup appeared saying: Do you want to block this suspicious software?
Name: Win32.Brontok
Risk Level: High
Description: This worm spreads via the Internet as an attachment to infected messages. It sends itself to email addresses harvested from the victim machine.

I assume that this is not a "Security Center Alert" from Windows firewall as it says. It does not give an option to keep blocking, instead, enable protection or download a file to protect CPU.

Shaw Secure now detects that I have a virus. The first time, I chose quarantine, and Shaw said that it was unable to and renamed the file.

It detected it again, when I went into the file folder that I suspected had the infected file. I tried to quarantine it, but Shaw Secure said it was missing.

It detected it again this morning, also by going to a folder that I thought may have been infected, and it was actually just finishing up a moment ago. Then it came up to tell me an error, but something I typed in here closed my window when it popped up, oops. I think that it looked like the previous message, saying that the file was no longer there, but I will never know now.

I need something fast, and hiring a computer technician is not fast enough. The only posts in various forums that I see related to this virus used MBAM to clean it, and it appears to have worked! Is your program what they referred to as MBAM?

I do prefer to try things before I buy, and I have saw some members here discussing a free version. First of all, can this free version clean this virus? Second of all, where can I get it and is it safe to download while this virus is active on my CPU? Or should I go to another computer and save it to a disk?

How much does your full version cost? If I had your real time scanning, would you have been able to detect this virus right away? I wonder, because it seems odd that my current virus protection did not detect it. And, as with above, where can I get the full version, and should I download to a different CPU or can I download it to my infected computer?

Please Help ASAP! I need to work, and I am scared to send files to clients with an infected CPU!

Note: I have a file that was created for another forum, called attach.txt, but they haven't responded... This file appears to be some type of log, please let me know if it would help you help me, and I will attach it.

You can try downloading and installing...if that fails...download to another machine and transfer with a pendrive.

I have never heard of a CPU infection...boot record, resident memory, sys.dll maybe, but not CPU!
nic

[klochhead]

NicKnayme, on May 9 2009, 03:18 PM, said:

You can try downloading and installing...if that fails...download to another machine and transfer with a pendrive.

I have never heard of a CPU infection...boot record, resident memory, sys.dll maybe, but not CPU!
nic

Thanks for your response, and Please excuse my lack of knowledge. I know very little about any of this. My computer is infected with a virus, is what I meant to say when I said CPU. I have no idea really of what specifically is infected, with the exception of the names of the files that are quarantined right now.

Do you think they should they stay quarantined, or should I delete them? It says: Trojan-Downloader.Win32.Small - system infection (one or more objects)

[AdvancedSetup]

Hello and Welcome to Malwarebytes.org

If you're having Malware related issues with your computer that you're unable to resolve.

• Please read and follow the instructions provided here: I'm infected - What do I do now?
  
• If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  
• When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.