Help - Search - Members - Calendar
Full Version: Mbam can't remove malware?
Malwarebytes Forum > Computer Help > Malware Removal - HijackThis Logs
jaxsta
I've recently installed a virus on my computer (accidentally of course). It was first picked up as trojan.reno
I removed the original program download and all associated install files, and also did a search for any folders that were created or modified on that date and removed them also. My anti virus does not pick up the virus anymore, but when I run mbam it reports the following:

Memory Modules Infected:
\\?\globalroot\systemroot\System32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll (Spyware.Agent) -> No action taken.

Files Infected:
\\?\globalroot\systemroot\System32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll (Spyware.Agent) -> No action taken.

Originally it picked up 7 files, and removed 5, but after the restart it keeps picking up these two. Even after I ask to remove them and restart, they still show up again.

Help please!
miekiemoes
Hi,

First of all, please update MalwareBytes, because the databaseversion is outdated.

  • Start MalwareBytes and click the Update tab. There click "Check for updates"
  • In case you can't update the database via the update option, please download and install the database from here. Only do this when the update option doesn't work.
  • Once the updates are downloaded, perform a full scan again.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply along with a fresh HijackThis log, then we'll proceed from there with new steps.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.
miekiemoes
Due to the lack of feedback, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.