viruslivescan.com ???? and lolcats/loldogs

spud17

Airwolf1 wrote: »

I think this is similar to the "Antivirus 2008" thing that’s going round, had to deal with this on the in laws pc a few weeks ago.

I've also seen Antivir64, presume it's yet another variation.

Airwolf1

A friend of mine had to manually remove it with the command prompt in safe mode. That isn't really my area, but I know that’s what he did as I watched him do it.

thomas01155

KEM wrote: »

Ran MBAM as suggested and the log file is as follows (looks remarkably small compared to others I've seen posted):-

Malwarebytes' Anti-Malware 1.30
Database version: 1351
Windows 5.1.2600 Service Pack 3

01/11/2008 15:07:38
mbam-log-2008-11-01 (15-07-38).txt

Scan type: Quick Scan
Objects scanned: 65718
Time elapsed: 7 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 6
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\acroiehelper.acroiehlprobj (Adware.Cinmus) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\!!5f226421-415d-408d-9a09-0dcd94e25b48} (Adware.Cinmus) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\!!06849e9f-c8d7-4d59-b87d-784b7d6be0b3} (Adware.Cinmus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\!!06849e9f-c8d7-4d59-b87d-784b7d6be0b3} (Adware.Cinmus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\!!06849e9f-c8d7-4d59-b87d-784b7d6be0b3} (Adware.Cinmus) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\acroiehelper.acroiehlprobj.1 (Adware.Cinmus) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adware.Cinmus) -> Quarantined and deleted successfully.

Is everything ok now?

i found this exact same thing on my computer

thomas01155

oh its a false positive http://www.malwarebytes.org/forums/index.php?showtopic=7224&hl=AcroIEHelper.dll the lastest update fixes it