Possible virus - weird computer problem UPDATED with hijack results please help!

GunJack

RIK, there were traces of TDSS rootkit and koobface in those logs, easy to miss in amongst all the mywebsearch carp....the good Doctor sounds like a good call

aliEnRIK

Ill put that down to my lack of sleep methinks

GunJack

aliEnRIK wrote: »

Ill put that down to my lack of sleep methinks

Ohhh yeahhhh....know that one

loulou123

Thanks SO much guys, right....

i ticked and fixed the things you mentioned in Hijack this, but then rescanned and their still there!

SO i then downloaded the Dr Web thing and did the quick scan (after turning off virus scanner) and it found 3 trojans (came up in infected) which i tried to remove, but it said it couldnt so i quarantined them instead) here is the quick scan report (dont know if you need this)

Scan statistics

---

Scanned: 24180
Infected: 3
Modifications: 0
Suspicious: 0
Adware: 0
Dialers: 0
Jokes: 0
Riskware: 0
Hacktools: 0
Cured: 0
Deleted: 0
Renamed: 0
Moved: 3
Ignored: 0
Scan speed: 1 Kb/s
Scan time: 0:30:00

---

=============================================================================
Total session statistics
=============================================================================
Scanned: 24180
Infected: 3
Modifications: 0
Suspicious: 0
Adware: 0
Dialers: 0
Jokes: 0
Riskware: 0
Hacktools: 0
Cured: 0
Deleted: 0
Renamed: 0
Moved: 3
Ignored: 0
Scan speed: 1 Kb/s
Scan time: 0:30:30
=============================================================================

The 3 trojans it found are Trojan.PWS.Siggen.7946

and Trojan.PWS.Siggen.8804

and were all connected to the facemoods and SweetIM applications.

I will run the full scan when i get home from work, but any tips on what i need to do next - am i safe now the 3 applications have been quarantined??

interlcore

I hope your comp gets well soon!

GunJack

run ccleaner, both cleaner and registry parts

http://www.filehippo.com/download_ccleaner/

loulou123

Am running the full dr scan, but its been scanning for nearly 8 hours and is only about 3 quarters done!

Has something gone wrong, or should it take so long?? It still seems to be scanning and hasn't obviously frozen or anything.

Am writing this on phone, as I can't access anything whilst scan is preforming.

Presuming the scan ever finishes do I delete everything it finds or cure or quaranteen it?

aliEnRIK

12 hours is an average for a full dr web scan

Id quarantine everything personally

loulou123

right full scan done, it found 11 'things'

Scan statistics

---

Scanned: 672888
Infected: 9
Modifications: 0
Suspicious: 0
Adware: 2
Dialers: 0
Jokes: 0
Riskware: 0
Hacktools: 0
Cured: 0
Deleted: 0
Renamed: 0
Moved: 7
Ignored: 0
Scan speed: 40 Kb/s
Scan time: 20:44:36

---

C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Documents and Settings\All Users\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Users\All Users\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Users\All Users\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Documents and Settings\All Users\McAfee\VirusScan\Quarantine\7db11111152015c0.bup - will be deleted after restart
C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\ProgramData\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Users\All Users\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Users\All Users\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine\7db11111152015c0.bup
C:\Users\All Users\McAfee\VirusScan\Quarantine\7db11111152015c0.bup - will be deleted after restart
C:\ProgramData\McAfee\VirusScan\Quarantine\7db11111152015c0.bup - will be deleted after restart
C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine\7db11111152015c0.bup - will be deleted after restart
=============================================================================
Total session statistics
=============================================================================
Scanned: 673638
Infected: 9
Modifications: 0
Suspicious: 0
Adware: 2
Dialers: 0
Jokes: 0
Riskware: 0
Hacktools: 0
Cured: 0
Deleted: 4
Renamed: 0
Moved: 7
Ignored: 0
Scan speed: 43 Kb/s
Scan time: 20:45:56
=============================================================================

I quaranted everything i could (4 of them would only give me delete as an option) what do i do with the quaranted things leave them where they are or delete?

Am now going to download c cleaner, but just did another scan on anti malware and it was 100% ok, so presuming ccleaner is ok do you think im ok now???

loulou123

HAve now installed and run ccleaner both the cleaner and registry parts and have fixed/deleted EVERYTHING it found (i did the back up thing too) and it found lots!

So what next please you very kind people