Jump to content

Recommended Posts

This sure seems to duplicate an earlier thread, but one that was never finished. I could really use some help here: https://forums.malwarebytes.org/index.php?showtopic=129242

Trying to get a machine back from an infection of ICE Security virus.  The virus is no longer starting, but I am unable to install MalwareBytes due to the error in the title of this post. In addition, IE starts but terminates within seconds. Chrome is working.

As in the other thread, I downloaded ERUNT, and got the same error there, CoCreateInstance failed. However it seemed to complete the backup anyway.

I downloaded MalwareBytes anti-rootkit (I had previously run Kaspersky Anti Rootkit, and it found nothing, so thank you for making a better one) and it found:

c:\programdata\clgclbgh.cpp [trojan.fakeMS.ED]

... but then the app froze.

I rebooted into safe mode command prompt and deleted c:\programdata\clgclbgh.cpp.  I saw a similarly random file name with the same create date, but I opted not to delete it but to try the rootkit scan again.

 

The second rootkit scan proceeded past the previous halt. and ran clean.

 

Junkware Removal Tool was run.

 

AdwCleaner was run.

IE  starts then terminates without allowing any user input. So I needed to use Chrome for ESET Online Scanner.  When I ran it, it got to 44% and the file itunes64.msi and seems to make no further progress (after finding 108 items including win64/Reveton.A trojan and a lot of potentially unwanted apps.

 

I've run ESET a second time, not scanning archives, and have a log file.

Now, I need some direction on proceeding...
 

system-log.txt

mbar-log-2014-03-23 (15-33-25).txt

JRT.txt

AdwCleanerS0.txt

esetlog.txt

Link to post
Share on other sites

Hello and Welcome to Malwarebytes

Oops, you seem to have posted this in the wrong section of the forum. For help with virus/malware removal please see below. Basically post exactly what you have here and post it over in the correct section as mentioned below. Thanks for understanding.

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you

Link to post
Share on other sites

Hi, bluffwood:

 

Until Firefox returns....

 

Only the mod team can move a post - neither Firefox nor I can do so. :(

 

It might be more efficient to start a NEW post over in the malware removal section >>HERE<<.

Just attach those same logs to that new post.

And, if you want, include a link back to this topic in the post:

https://forums.malwarebytes.org/index.php?showtopic=144772

One of the malware helpers will assist you over in the malware removal section as soon as possible.

 

Thanks,

 

daledoc1

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.