Malware Discussions

[malwarekiller]

Download aswmbr.exe ( 1.8mb ) to your desktop. 

http://public.avast.com/~gmerek/aswMBR.htm
 Double click the aswMBR.exe to run it  Click the "Scan" button to start scan.

• 

• Click the [Scan] button to start scan

  

• On completion of the scan click [Save log], save it to your desktop and post in your next reply.

  NEXT

  Please download Malwarebytes' Anti-Malware from Here
  
  Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

  If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

[fedup]

aswMBR version 0.9.9.1532 Copyright(c) 2011 AVAST Software
Run date: 2012-02-08 17:20:01
-----------------------------
17:20:01.997 OS Version: Windows x64 6.1.7600
17:20:01.997 Number of processors: 2 586 0x2505
17:20:01.997 ComputerName: MARG-PC UserName: Marg
17:20:04.431 Initialize success
17:20:29.473 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
17:20:29.473 Disk 0 Vendor: ST950032 0003 Size: 476940MB BusType: 3
17:20:29.488 Disk 0 MBR read successfully
17:20:29.488 Disk 0 MBR scan
17:20:29.488 Disk 0 Windows 7 default MBR code
17:20:29.504 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 25600 MB offset 2048
17:20:29.519 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 190775 MB offset 52430848
17:20:29.519 Disk 0 Partition - 00 0F Extended LBA 260562 MB offset 443140096
17:20:29.535 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 260561 MB offset 443142144
17:20:29.551 Service scanning
17:20:30.907 Modules scanning
17:20:30.916 Disk 0 trace - called modules:
17:20:30.924
17:20:30.929 Scan finished successfully
17:21:04.642 Disk 0 MBR has been saved successfully to "C:\Users\Marg\Desktop\MBR.dat"
17:21:04.658 The log file has been saved successfully to "C:\Users\Marg\Desktop\aswMBR.txt"

[malwarekiller]

Please tell me how is your computer running??

[fedup]

Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.02.08.01

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Marg :: MARG-PC [administrator]

Protection: Enabled

8/02/2012 10:12:44 PM
mbam-log-2012-02-08 (22-12-44).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 182235
Time elapsed: 6 minute(s), 7 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

[fedup]

Hello,

There is no change in my computer.   I have found that when it starts writing 666666 that is when the 'a' key doesn't work, but if I backspace and then press the escape key, the 'a' works again and the automatic typing remains stopped until next time I restart the computer.

Is there any other reason this might happen beside a virus?

Thank you for your time so far, and your patience.

[fedup]

I did a full scan too but still found nothing.

[malwarekiller]

U are malware free...

Try the below go to Run... command for me please:-

sfc /purgecache

And let myself know the outcome, also run the below:-

Check Hard Disk For Errors:

Press Start >> Run..., then copy/paste the following command into the box and press OK:

cmd /c chkdsk c: |find /v "percent" >> "%userprofile%\desktop\checkhd.txt"

A blank command window will open on your desktop, then close in a few minutes. This is normal. 

A file icon named checkhd.txt should appear on your Desktop. Please post the contents of this file.

Hard-Drive Maintenance/Repair:

Note: for the CHKDSK portion you may refer to this tutorial of mine here and follow the instructions for Graphical Mode if you so wish.

Click on Start >> Run and type cleanmgr in the box and press OK.

• Ensure the boxes for Temporary Files, Temporary Internet Files and Recycle Bin are checked.
• You can choose to check other boxes if you wish but they are not required.
• Click on OK then Yes.

Next:-

• Click on Start >> Run... then type in CMD and click on OK.
• At the Command Prompt C:\ > type the following:
• CD C:\ and hit the Enter/Return key.
• Now type in DEFRAG C: -F
• A Analysis report will be displayed and then Windows will start the Defragmention run automatically.
• This may take some time, when completed the Command Prompt C:\ > will appear.
• Now type in CHKDSK C: /R and hit the Enter/Return key.
• When prompted with:

CHKDSK cannot run because the volume is in use by another process
Would you like to schedule this volume to be checked next time the system 
restarts (Y/N)

• Hit the Y key then at the Command Prompt C:\ >
• Type in EXIT and and hit the Enter/Return key.
• Now Reboot(Restart) your computer.

Note: Upon Reboot(Restart) the CHKDSK(check-disk) will start and carry out the repairs required.

[fedup]

Yay, not so fed up today.

Have run the defrag,  and chkdsk.  Report said no errors.  (although a previous "scannow' said there were corrupt files..I was not able to access that report - even though I was logged in as administrator.)

The chkdsk volume check did not happen on reboot -  it flashed me a message saying it had been aborted - however today is first time that I have had no problem with missing letters or automatic typing  - so guess something has worked.   Fingers crossed - I only started the machine a few minutes ago.

THANK YOU for helping me. (Hope I don't have to annoy you ever again.)

marg

[malwarekiller]

Hi.

Good to hear...u may just simply delete the tools we used for malware check and use malwarebytes as a weeky scanner.