Jump to content

Malwarebytes

Trojan.BHO.H Cant get rid keeps coming back

- - - - -

4 replies to this topic

#1
angelsent

    New Member

  • Members
  • Pip
  • 2 posts
I reasonly started getting pop-ups and my computer started running a little sluggish. Used windows live onecare and it found some and removed but didnt help. My brother-in-law told me to download and run Malwarebytes and I did and it found a whole bunch more malware/Trojans. Did three scans, one being in safe mode but Trojan.BHO.H shows up every time. Always the same file. Here is my last log.


Attached File  10_17_09_Log.txt   919bytes   57 downloads

Malwarebytes' Anti-Malware 1.41
Database version: 2970
Windows 6.0.6002 Service Pack 2

10/17/2009 1:12:21 PM
mbam-log-2009-10-17 (13-12-21).txt

Scan type: Full Scan (C:\|)
Objects scanned: 93145
Time elapsed: 36 minute(s), 31 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\LEON&M~1\AppData\Local\Temp\low\COUPON~1.DLL (Trojan.BHO.H) -> Quarantined and deleted successfully.

#2
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Hi,

First of all, open Malwarebytes, click the update tab and then download the latest updates.
Then close malwarebytes again.

Then...

1. Click the Start Menu.
2. Click Run.
3. Type in "mbam.exe /developer", without the quotes.
4. Run the same type of scan you did before and save the logfile and post it.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
angelsent

    New Member

  • Members
  • Pip
  • 2 posts

View Postmiekiemoes, on Oct 20 2009, 04:07 AM, said:

Hi,

First of all, open Malwarebytes, click the update tab and then download the latest updates.
Then close malwarebytes again.

Then...

1. Click the Start Menu.
2. Click Run.
3. Type in "mbam.exe /developer", without the quotes.
4. Run the same type of scan you did before and save the logfile and post it.



Ok I followed the steps you left and here is the logfile.


Malwarebytes' Anti-Malware 1.41
Database version: 3045
Windows 6.0.6002 Service Pack 2

10/27/2009 10:41:22 PM
mbam-log-2009-10-27 (22-41-22).txt

Scan type: Full Scan (C:\|)
Objects scanned: 232720
Time elapsed: 1 hour(s), 7 minute(s), 55 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\LEON&M~1\AppData\Local\Temp\low\COUPON~1.DLL (Trojan.BHO.H) -> Quarantined and deleted successfully. [5268667939808340707970837468354148091810013986796885748079]

#4
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Hi,

* Download Trend Micro Hijack This™
Doubleclick the HJTInstall.exe to start it.
By default it will install HijackThis in the Program Files\Trendmicro folder and create a desktop shortcut.
HijackThis will open after install. Press the Scan button below.
This will start the scan and open a log.
Copy and paste the contents of the log in your next reply.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#5
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Due to the lack of feedback, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us