Trouble w/ Zefarch gen

JohnEnt · Apr 1, 2010

I was told by our network system admin that my laptop had a problem w/ Zefarch gen. I've run all the Malware steps and have attached the logs (SAS didn't create a log becuase it didn't find any issues). Laptop appears to work fine now. My question: would the Malware procedure have eliminated Zefarch, is there any way to tell, or is the proof in the lack of additional problems? Many thanks, in advance, for any advice. John

TimW · Apr 1, 2010

You should have your network administrator clean it then. I see multiple user accounts, all with Admin. privileges. I would suggest you run SAS and MBAM on each account. Your logs are clean. I cant answer your question because I have no idea what Zefarch gen as it's just the name given the file by your AV software. I would need to know the full file path to what is reported.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 6 of the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

JohnEnt · Apr 2, 2010

Tim,
Appreciate your quick response. Have the network administrator clean it would generally be good advice except, here at the university, human and $ resources are thin. Their initial response was "trash the machine & buy a new one or we'll wipe it clean & reload which, given the backlog, will take us 4 -5 weeks". Neither option a good one for me. Given the logs are clean and machine seems to run well, I'll complete your instructions, keep using it, and hope for the best. Thanks much for your help.
John

TimW · Apr 2, 2010

Good to know. You are most welcome.

Log in or Sign up

Trouble w/ Zefarch gen

JohnEnt Private E-2

Attached Files:

combofixlog.txt

mbam-log-2010-03-31 (08-22-11).txt

RRlog.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

JohnEnt Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member