Rogue Antivirus Soft

monalisa · May 25, 2010

Hello,

My laptop started getting an "antivirus software alert" and within a few minutes all programs including browser/ symantec antivirus stopped responding to double-clicks.
So I did the malware removal routine in "Safemode with networking". After that, I could boot to normal mode and since the programs were working, I repeated each test in the normal mode (not sure if doing twice is recommended). Attached is the log from the normal mode (ie.second) scan.

Please advise how to disinfect completely.
Truly appreciate your help.
Thanks.
Regards,
Monalisa

monalisa · May 25, 2010

Attached is the 4th log.

TimW · May 25, 2010

It would appear as though the scans took care of it. The only thing I see that is questionable is this:
C:\Documents and Settings\Srijit Mukherjee.BUGGS\Local Settings\Application Data\ifgdktppg --> delete it if you don't know what it is.

What issues are you still having, if any?

monalisa · May 25, 2010

I dont any obvious problems (like pop-ups) but symantec scan is detecting multiple Trojan.Fake.AV and it is apparently "Cleaning by deletion" but repeated scan is detecting it again. SuperAntiSpyware and malwarebytes is also showing infections when I am repeating the scans.

Please advise.
Thanks.
Monalisa

TimW · May 25, 2010

Please attach the logs from SAS and MBAM as well as tell me exactly what symnatec is finding.

Log in or Sign up

Rogue Antivirus Soft

monalisa Private E-2

Attached Files:

SAS-Log.txt

mbm-Log.txt

ComboFix-Log.txt

RR-Log.txt

monalisa Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

monalisa Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member