Help with infected files needed

Alex30 · Sep 8, 2009

Hi,
I have just run a scan with MalwareBytes and put these infected files into quarantine. The problem is they are System 32 files and presumably required for the PC to run right but I don't know how or if they can be replaced or repaired. Any help would be appreciated.
Here is the log

EDIT: Inline log deleted and attached.
Regards Alex

dr.moriarty · Sep 8, 2009

Hello, Alex!

Alex30 said: ↑

The problem is they are System 32 files and presumably required for the PC to run right ..
Click to expand...

Very often malware adds files to the SYSTEM32 folder which contains the Roots and the Primary Core Guts to the Windows NT Operating system.

I didn't find any false positives by Malwarebytes' in your log.

dr.m

Alex30 · Sep 9, 2009

Cheers,
In the end I decided to restore a full disk image as I just couldn't be suer about those files. Thank you for your time and effort.
Regards Alex

dr.moriarty · Sep 9, 2009

"Thank You" for letting me know that, Alex. I'm sorry that you had to re-install, but now you have a "clean slate".

Best Of Luck!
dr.m

Alex30 · Sep 9, 2009

Hi dr.moriarity,
The reinstall wasn't bad actualy. I use the free programme Macrium reflect to create a disk image on to a flash stick and Macrium reformats my hard drive and puts the full image back on in about 20 minutes. You lose nothing apart from any thing that was added or changed since your last image was made. I had some bits and pieces I could have done without losing but an extra 30 minutes saw these back in place. Frequent back ups are the answer and as that is just a couple of clicks with Macrium it is no bind.
Once again thanks for your help.
Regards Alex

dr.moriarty · Sep 9, 2009

:wine

That's great!

Please be sure to review our How to Protect yourself from malware Guide.

Safe surfing! http://i268.photobucket.com/albums/jj5/drmoriarty/Emoticons/char145.gif

Alex30 · Sep 9, 2009

Hi dr.Moriaty,
sorry to bother you again but I have just read through "Protect Yourself....."
As a result the only thing I needed to do was to disable autoruns but I am not sure what this means in practical terms in respect of the functioning of the PC.
Could you or anyone else shed a bit of light.
Regards Alex

dr.moriarty · Sep 9, 2009

Hi!

Alex30 said: ↑

As a result the only thing I needed to do was to disable autoruns but I am not sure what this means in practical terms in respect of the functioning of the PC.
Click to expand...

Windows "Auto-Run" will, by default, automatically look for a file called Autorun.inf on any CD, or DVD you pop in to your system—if it finds it, it will execute whatever programs it is instructed. This is a big security issue, as there are a lot of spywares and viruses distributed this way. AUTORUN.INF Viruses are virus that uses the Autorun feature of Windows to spread itself on computers. This virus makes a copy of the autorun.inf file to the root or main directory of all the drives on your PC, internal and / or external disks, to make the virus runs every time the external disks like pendrives or USB drives were inserted or every time you double-click the drives through the Windows Explorer. * The only downside of this is that if you insert a CD with software on it, you have to explore it by hand to find the setup program.
Click to expand...

dr.m

Log in or Sign up

Help with infected files needed

Alex30 Private First Class

Attached Files:

mbam-log-2009-09-05 (13-47-35).txt

dr.moriarty Malware Super Sleuth Staff Member

Alex30 Private First Class

dr.moriarty Malware Super Sleuth Staff Member

Alex30 Private First Class

dr.moriarty Malware Super Sleuth Staff Member

Alex30 Private First Class

dr.moriarty Malware Super Sleuth Staff Member