"Security Tool" removal

aliEnRIK

Grumpy_Old_Duffer wrote: »

Excuse me if I seem cautious, but why do you want to see the logs. I'm no expert so don't want to post anything on an open forum that could give information about a personal laptop.

They dont show anything that could be used maliciously

We need to see them to see if it really is clean. MANY trojans can remain on a system without the user being aware
Your call, we're just trying to help

Grumpy_Old_Duffer

aliEnRIK wrote: »

They dont show anything that could be used maliciously

We need to see them to see if it really is clean. MANY trojans can remain on a system without the user being aware
Your call, we're just trying to help

Just being overly? careful. Wifes laptop anyway so I don't care :rotfl::D

Malwarebytes' Anti-Malware 1.44
Database version: 3784
Windows 6.0.6001 Service Pack 1 (Safe Mode)
Internet Explorer 7.0.6001.18000
24/02/2010 16:24:02
mbam-log-2010-02-24 (16-24-02).txt
Scan type: Full Scan (C:\|)
Objects scanned: 202390
Time elapsed: 31 minute(s), 33 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\51030110 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
C:\ProgramData\51030110 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
Files Infected:
C:\ProgramData\51030110\51030110.exe (Rogue.Multiple.H) -> Quarantined and deleted successfully.
C:\Users\********\Desktop\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.
C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.

aliEnRIK

Id say its clean (Not guaranteed, just what i can tell from that log, a hijack one would be more helpful)

Marty999

Glad you got your PC working again. By coincidence, a friend of mine called round at the weekend with his laptop as he had acquired the same infection. I Googled the problem and found a solution here, using Malwarebytes as mentioned above. It gives simple but detailed instructions and did the trick. I thought it may be of use to others who have the same problem.