Please help ----- win32.alcan.I

Discussion in 'Malware Help (A Specialist Will Reply)' started by uncreased, Feb 18, 2006.

  1. uncreased

    uncreased Private E-2

    Hi if someone can help me get rid of this malware which is really giving me
    a headache.

    The EZ Anti virus shows hundreds of infected files by this virus

    win32.alcan.I

    I'm not sure what to do

    I formatted my drive but its still there!!

    Please help!!:eek:
     
    uncreased, Feb 18, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please attach a log from EZ Anti virus that show what and where it is finding problems then proceed to the below.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
     
    chaslang, Feb 18, 2006
    #2
  3. uncreased

    uncreased Private E-2

    Hi thanks for replying

    this is what ez log shows

    2006/02/19 01:17:02.656 File infection: C:\Program Files\outlook\v.tmp is Win32/Alcan.I worm. Deleted

    I attached the log of the scan also
     

    Attached Files:

    uncreased, Feb 19, 2006
    #3
  4. uncreased

    uncreased Private E-2

    This is the active scan log. The Bitdefender found and fixed a lot of files, but it froze and I couldnt save the log file.

    Thanks again for the support,

    I HOPE THE PEOPLE WHO SPREAD THESE MALICOUS PROGRAMS DIE SLOWLY WHILE SUFFERING.
    :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad:
     
    uncreased, Feb 19, 2006
    #4
  5. uncreased

    uncreased Private E-2

    Active Scan Log
     

    Attached Files:

    uncreased, Feb 19, 2006
    #5
  6. uncreased

    uncreased Private E-2

    This is the HIJACK THIS LOG.
     

    Attached Files:

    uncreased, Feb 19, 2006
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You never install HijackThis properly as per step 7. You have it here:
    C:\Documents and Settings\Administrator.CLASS-8\Desktop\HijackThis.exe

    It does not matter right now though since there is nothing we need to fix with it.

    Formatting your drive is not going to help you when you just put all the infected ZIP files back on your PC again. All those files you downloaded (questionable as to where you got them and is this legit) are infected. Since your antivirus application believes they are infected and cannot clean them, you have a few choices:

    1) call you AV company and ask them why they cannot fix the problem. If you have a paid version you should be able to get support. Perhaps they are not fixable and must be deleted.

    2) scan the ZIP files with an online file checking tool like below to see if they are really infected:

    http://virusscan.jotti.org/

    3) just delete all the infected zip files.
     
    chaslang, Feb 19, 2006
    #7
  8. uncreased

    uncreased Private E-2

    I did not download any of these files

    they were coming from nowhere while the ez anti virus is scanning

    or when I scan using adaware

    I it is very weird.


    When I last scaned using panda only these malware showed:


    Incident Status Location

    Spyware:Cookie/Microsofte Not disinfected C:\Documents and Settings\Administrator\Cookies\administrator@microsofteup.112.2o7[1].txt
    Spyware:Cookie/2o7.net Not disinfected C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\vb8jooq9.default\cookies.txt[]
    Adware:Adware/WUpd Not disinfected C:\Program Files\Microsoft AntiSpyware\Quarantine\E0B6DAAC-D8D1-409B-98ED-9C85DB\898C81A6-8BE5-46B0-BFDB-9AC368
    Dialer:Dialer.BGL Not disinfected C:\Program Files\Microsoft AntiSpyware\DeactivatedItems\8BBCC72E-E2BB-4D57-82DC-BD0CF8.asq
    Dialer:Dialer.BGL Not disinfected C:\Program Files\Microsoft AntiSpyware\DeactivatedItems\BEC32BB8-254A-417F-A2ED-43647A.asq
     
    uncreased, Feb 19, 2006
    #8
  9. uncreased

    uncreased Private E-2

    And I cant even find those 2000+ files which are showing in the scan

    there is no such directory in my pc

    I need one final check to be sure that my pc is clean.

    If u could help me please.
     
    uncreased, Feb 19, 2006
    #9

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds