Have I got Virus?

rome1067

I've downloaded McAfee from HSBC which was free but its been trying to do a scan for the last couple of days but can't complete it. The computer keeps switching off half way though the scan.

Could I have a virus which is doing this because the scan is looking for it? How would I know if I have got one?

Or could it be a problem with the computer? It doesn't switch off when I'm using it for the internet but I don't know if a scan uses more power and is sort of overloading it.

Be gentle with me I'm not a techie at all(as you can probably tell!)

Thanks

Honourable_J

Don't worry about the virus scan 'overloading' your computer, that cannot happen.

I'd recommend downloading the free version of AVG and giving your computer a scan with that.

http://free.avg.com/

aliEnRIK

DONT install AVG with Mcafee still on
(In fact id suggest against installing it at all)

Download MALWAREBYTES (Make sure you click 'DOWNLOAD NOW')
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
UPDATE and FULL SCAN
Post the log here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

anudeglory

rome1067 wrote: »

I've downloaded McAfee from HSBC which was free but its been trying to do a scan for the last couple of days but can't complete it. The computer keeps switching off half way though the scan.

Could I have a virus which is doing this because the scan is looking for it? How would I know if I have got one?

Or could it be a problem with the computer? It doesn't switch off when I'm using it for the internet but I don't know if a scan uses more power and is sort of overloading it.

Be gentle with me I'm not a techie at all(as you can probably tell!)

Thanks

It's quite unlikely that a virus would switch you PC off - not very useful for spreading itself if anything!

Are you using the computer when the scan is running? I do wonder if you have some power saving profile switching your computer to hibernate/sleep after a certain amount of inactivity from user input....

gaming_guy

anudeglory wrote: »

It's quite unlikely that a virus would switch you PC off - not very useful for spreading itself if anything!

Are you using the computer when the scan is running? I do wonder if you have some power saving profile switching your computer to hibernate/sleep after a certain amount of inactivity from user input....

i have come across viruses that shut the PC down when virus scans are run.

the PC involved had Windows 2k pro and xp pro (infected install). i booted into 2k and ran the scans & removed threats there. i booted back into xp and the av scan ran fine without shutting down the machine

weegie.geek

Honourable_J wrote: »

Don't worry about the virus scan 'overloading' your computer, that cannot happen.

I'd recommend downloading the free version of AVG and giving your computer a scan with that.

http://free.avg.com/

The fact that you're recommending AVG speaks volumes, but OF COURSE a virus scan can "overload" the machine.

Most pcs sit idle 99% of the time. If the PC has a cooling problem like a dead fan or at least clogged fans, you probably wouldn't notice it when browsing the web etc.

When doing something intensive like reading every single file on the hard drive and scanning them for virus patterns, the CPU will be working a lot harder, and will heat up considerably. If the means of dissipating this heat aren't working 100%, there's a good chance there will be crashes.

Jaffa.

Try running a scan in safe mode. Restart your computer and press F8 before the windows logo pops up.

rome1067

I've done the malware and hijack this but I can't post the logs as it says I can't because there are links in it.

I deleted some things that malware brought up so do you think I'm ok now?

aliEnRIK

Impossible to say if I cant see them

try posting BOTH the logs but change the links slightly (Or take them out entirely)

Or dont ~ your call

Browntoa

can you post just the top part of the Malwarebytes log that says what is deleted ??

the bit that looks like

Files Infected:
C:\WINDOWS\system32\dllcache\beep.sys (Trojan.Patched) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\beep.sys (Trojan.Patched) -> Quarantined and deleted successfully.

rome1067

Here is the malware log, its the hijackthis that has the links.

Malwarebytes' Anti-Malware 1.36
Database version: 2036
Windows 5.1.2600 Service Pack 3
24/04/2009 20:20:26
mbam-log-2009-04-24 (20-20-26).txt
Scan type: Full Scan (C:\|)
Objects scanned: 189936
Time elapsed: 52 minute(s), 31 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 3
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
C:\Program Files\Common Files\DriveCleaner Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
C:\Documents and Settings\manager\Application Data\DriveCleaner Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
C:\Documents and Settings\manager\Application Data\DriveCleaner Free\Logs (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
Files Infected:
C:\Documents and Settings\manager\Application Data\DriveCleaner Free\Logs\update.log (Rogue.DriveCleaner) -> Quarantined and deleted successfully.