heuristic

Discussion in 'Malware Help (A Specialist Will Reply)' started by peterr, Mar 18, 2011.

  1. peterr

    peterr MajorGeek

    Please note the picture attached so you can see the attack. Is this a new 'bug' as I get it at times and my a/v program geeps blocking it.
    Thank you
     
    Last edited: Mar 28, 2011
  2. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Hello, peterr

    There's nothing that I've found about this .dat file on the net; your antivirus program seems to be doing its job. However, if you wish us to check your machine for malware - please perform the required steps given below:

    Please follow the instructions in the below link:

    READ & RUN ME FIRST. Malware Removal Guide


    and then attach the requested logs to your next reply when you finish these instructions.
    • **** If something does not run, write down the info to explain to us later but keep on going. ****
    • Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.
    • After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
    Helpful Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:[/SIZE]
    2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes, you could use a flash drive too, but flash drives are writeable and infections can spread to them.
    3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
    4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
    * Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated - our system works the oldest threads FIRST.
     
  3. peterr

    peterr MajorGeek

    Hello
    Yes, the a/v program is doing its job, thank fully.
    I was wondering why I see this about once every ten days or so.
    Is this unusual as in someone targeting me or can this just occur then vanish?
    Thank you
     
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    It might just be a false positive too, but run the scans as Dr M said and attach the logs. Without those he cannot help you.
     
  5. peterr

    peterr MajorGeek

    I will investigate how to attach logs so I can help facilitate matters - thank you.
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  7. peterr

    peterr MajorGeek

    >>I have posted attachments,basically PrtScn here.
    Your directions filled in some blanks for me, so thank you.
    I guess the idea is to PrtScn, or copy and paste, or attach to ?clipboard when my screen displays a detection by Norton. Then I can attach it here where one picture will be woth more than........
     
  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    So you are trying to attach a screenshot of what Norton is finding? Yes use PrtScr and then open up paint > edit > Paste. save as a jpeg or gif and attach here.
     
  9. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    The attachments that I'm most interested in are the logs produced from running the
    READ & RUN ME FIRST. Malware Removal Guide .

    They are:
    • SASlog.txt log from SuperAntiSpyware.
    • Malwarebytes Anti-Malware log
    • RRlog.txt (from RootRepeal)
    • ComboFix.txt (normally C:\ComboFix.txt)
    • MGlogs.zip - normally it is C:\MGlogs.zip - only attach this log from MGtools.exe DO NOT attach any logs seen in the MGtools folder.
    You should attach all of your logs to one message after you have completed all scans.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds