jaxsta
Jun 18 2009, 11:23 PM
I've recently installed a virus on my computer (accidentally of course). It was first picked up as trojan.reno
I removed the original program download and all associated install files, and also did a search for any folders that were created or modified on that date and removed them also. My anti virus does not pick up the virus anymore, but when I run mbam it reports the following:
Memory Modules Infected:
\\?\globalroot\systemroot\System32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll (Spyware.Agent) -> No action taken.
Files Infected:
\\?\globalroot\systemroot\System32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll (Spyware.Agent) -> No action taken.
Originally it picked up 7 files, and removed 5, but after the restart it keeps picking up these two. Even after I ask to remove them and restart, they still show up again.
Help please!
miekiemoes
Jun 19 2009, 12:13 PM
Hi,
First of all, please update MalwareBytes, because the databaseversion is outdated.
- Start MalwareBytes and click the Update tab. There click "Check for updates"
- In case you can't update the database via the update option, please download and install the database from here. Only do this when the update option doesn't work.
- Once the updates are downloaded, perform a full scan again.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy&Paste the entire report in your next reply along with a fresh HijackThis log, then we'll proceed from there with new steps.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.
miekiemoes
Jun 25 2009, 08:00 PM
Due to the lack of feedback, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.
Everyone else please begin a New Topic.