1 reply to this topic

[andrewm8061]

Hello.

I am trying to get rid of the intevalhehehe program that was installed on my computer after running winrar from cnet.
last time ile do that...
the malware program got rid of the pop op message from the interval message through winrar.
and winrar has been uninstalled from my computer.
I have tried running AVG free 8.0
aswell as running the malware program that is so noted throughout these forums.
i can send my posting if you would like showing what the log said below.



Malwarebytes' Anti-Malware 1.31
Database version: 1494
Windows 5.1.2600 Service Pack 2

12/12/2005 8:36:57 AM
mbam-log-2005-12-12 (08-36-57).txt

Scan type: Quick Scan
Objects scanned: 54677
Time elapsed: 4 minute(s), 14 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Explore (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\explore.exe (Trojan.Agent) -> Delete on reboot.









any further help with this would be great

-a

[andrewm8061]

Continued.

The pop up message may be gone. but when i go to mozilla or internet explorer. the microsoft web page comes up saying...hey!
please buy our hella expensive product becuase we are douchebags.

and wont let me go to any other site.
withought rolling through a toolbar...
wich is how i got here.

help