Malware.Packer.Gen

[BenjaminE1981]

The latest version of MBAM (definition 5064) finds the Malware.Packer.Gen problem here:

D:\System Volume Information\{ae83db66-e059-11df-befa-001aa0743d56}{3808876b-c176-4e48-b7ae-04046e6cc752}

What would this point to, and could anyone please give me suggestions as to how this should be removed?

My OS: Windows Vista Home Premium 32-bit

Also: the actual MBAM log file is included here for further convenience.

Thank you,

Ben

mbam_log_2010_11_06__17_13_44_.txt

[Maniac]

Hello Ben! Welcome to Malwarebytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

• The process of cleaning your system may take some time, so please be patient.
  
• Follow my instructions step by step if there is a problem somewhere, stop and tell me.
  
• Stay with the thread until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  
• Instructions that I give are for your system only!
  
• If you don't know or can't understand something please ask.
  
• Do not install or uninstall any software or hardware, while work on.
  
• Keep me informed about any changes.
  

This crap should already have been removed from your system. Let's check:

• Launch Malwarebytes' Anti-Malware
  
• Go to "Update" tab and select "Check for Updates". If an update is found, it will download and install the latest version.
  
• Go to "Scanner" tab and select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply.
  

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

[BenjaminE1981]

Hello Ben! Welcome to Malwarebytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

• The process of cleaning your system may take some time, so please be patient.
  
• Follow my instructions step by step if there is a problem somewhere, stop and tell me.
  
• Stay with the thread until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  
• Instructions that I give are for your system only!
  
• If you don't know or can't understand something please ask.
  
• Do not install or uninstall any software or hardware, while work on.
  
• Keep me informed about any changes.
  

This crap should already have been removed from your system. Let's check:

• Launch Malwarebytes' Anti-Malware
  
• Go to "Update" tab and select "Check for Updates". If an update is found, it will download and install the latest version.
  
• Go to "Scanner" tab and select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply.
  

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Today's report (11-08-2010):

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 5074

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18975

11/8/2010 7:43:20 AM

mbam-log-2010-11-08 (07-43-20).txt

Scan type: Quick scan

Objects scanned: 140422

Time elapsed: 10 minute(s), 1 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

Borislav,

Apparently the D:\ drive is not included in Quick Scan mode, but in Full Scan. The D:\ drive is where the infected file is found.

It is a file that cannot be removed when I try. So, could you please help me further.

mbam_log_2010_11_08__07_43_20_.txt

[Maniac]

Okay, perform a full scan and show me your log file.

[BenjaminE1981]

Okay, perform a full scan and show me your log file.

Here is today's report (11-09-2010)

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 5080

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18975

11/9/2010 6:41:03 AM

mbam-log-2010-11-09 (06-41-03).txt

Scan type: Full scan (C:\|D:\|F:\|)

Objects scanned: 264846

Time elapsed: 1 hour(s), 3 minute(s), 39 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

It appears the malware must be removed from the D:\ drive, because it could not find any malicious items anywhere on my computer. Scan type is "Full Scan."

~Ben

mbam_log_2010_11_09__06_41_03_.txt

[Maniac]

Good. Anything else?

[BenjaminE1981]

Good. Anything else?

Nothing so far, which should be fine.

~Ben

[Maniac]

Good work, Ben!

Some malware preventions:

http://www.bleepingcomputer.com/tutorials/tutorial174.html

http://forums.malwarebytes.org/index.php?showtopic=9365

[LDTate]

Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you.