Virus problems - Thanks for the help! :)

sephrenia

Earlier today I tried to access firebox.com to make use of a discount voucher that was posted in the discount section of this site and when the page was loading, the following popped up (sorry if it's huge!):



I was really concerned that it's trying to hit paypal as I was using my own personal paypal account to test a website module with yesterday. As you can see I used AVG to 'heal' the infections but would that clear it up completely?? Also, should I post this in warnings as well so that other people know what's happening on that site?

Thanks in advance!
Seph
xx

The_Grandmaster

Run malwarebytes then hijack this: written by alienRIK:

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

The_Grandmaster

can't say where you got it from... someone else might be happy to test the site!

sephrenia

Thankyou for the superfast reply Grandmaster!

The incident occurred on my ex-husband's PC while he was downstairs (I know, I'm stupid!) but he's already doing a full malware scan on his computer with the malware bytes program and removed any obvious infections although I will tell him about the HIJACK THIS program you mentioned as I'm sure he'll want to make doubly sure.

I was just worried that I had totally messed up his PC (so not a fight I want to have!) and that other people would get this as well who don't have access to some technical knowledge!

Thanks again

sephrenia

The_Grandmaster wrote: »

can't say where you got it from... someone else might be happy to test the site!

You may be right there but I only ever go to set sites, MSE, The Daily Mail, BBC and Tesco. I very very rarely use any other site but my ex will be doing a double check to confirm wether or not it is indeed firebox as he is like me and only goes to certain sites.


I'll let you know what he comes up with

The_Grandmaster

Also please ask him to post the malwarebytes log. We'll know what sort of infection it is.

Quite likely we (or someone with experience) will run another programme just to ensure everything is gone.
Final step would be to remove AVG for a better antivirus programme. But step by step!

Browntoa

post which thread...I'd like to check it myself and remove if need be from discount codes

sephrenia

Browntoa wrote: »

post which thread...I'd like to check it myself and remove if need be from discount codes

Hi,

it was this thread: https://forums.moneysavingexpert.com/discussion/2611409

I clicked the link in that post and followed it and started getting hit by that virus which led me to believe that it was the firebox site causing it. If it was that link and not firebox could you let me know please so I can change the thread title as I don't want to be accusing firebox of doing it if it isn't!

Thanks

sephrenia

The_Grandmaster wrote: »

Also please ask him to post the malwarebytes log. We'll know what sort of infection it is.

Quite likely we (or someone with experience) will run another programme just to ensure everything is gone.
Final step would be to remove AVG for a better antivirus programme. But step by step!

Thankyou! I'll tell him to do it as soon as he gets back home again (he's out celebrating finding out he's a grandad for the first time!).

The_Grandmaster

Browtoa - are you going to test the site?

dogmaryxx

No problems on firebox.com or link from Mse and on searching Google etc. no matches found for Win32/Gaelcum.A so not a virus I'm sure.

The Public folder in Windows Vista is used for sharing folders and files with people on the same computer or the same network so probably nothing to worry about. AVG false positive ???

Tell ex to ditch AVG. Use removal tool http://www.avg.com/gb-en/download-tools
and install free version of

AVAST, AVIRA or MICROSOFT SECURITY ESSENTIALS