Trojan/Virus! Help!

LizEstelle

I was looking at an obscure, American cookery website yesterday when I had a beep from my PC and a note from Avira saying that TR/Crypt.XPACK.Gen had been detected. I pressed the 'deny access' button and thought that was that.

Looking at the 'events' log on Avira today, it claims that TWO detections of this were made yesterday and that I 'allowed access' for one of them, which is complete nonsense.

I'm really shocked and worried because, googling this thing, it seems it can keylog banking passwords, hijack the browser and all sorts of other nasties.

Apparently I have this thing on my PC, even though it seems to be running normally in all regards today.

Can anyone tell me what to do, bearing in mind that I'm a technical illiterate and think that a hard drive is getting from Bristol to Bath?

GunJack

first off, do a full scan with avira - it should pick it up, as it did so when you are on the site.

next, download, update and quick scan with mbam
http://www.filehippo.com/download_malwarebytes_anti_malware/

delete all it finds and post the log back here...

easy starter for 10

LizEstelle

GunJack wrote: »

first off, do a full scan with avira - it should pick it up, as it did so when you are on the site.

next, download, update and quick scan with mbam
http://www.filehippo.com/download_malwarebytes_anti_malware/

delete all it finds and post the log back here...

easy starter for 10

Not such an easy starter, Jack.

Already scanned with Avira. It picked up zilch. Ditto with Malwarebytes although this was only a 'quick scan'. I shall try a full one.

LizEstelle

Ok, I really would appreciate some help with this now. A full Malwarebytes scan reveals nothing, as does an Avira scan itself despite the fact that it was the Avira Guard which gave the warning.

Can anyone help, please?

debitcardmayhem

LizEstelle wrote: »

Ok, I really would appreciate some help with this now. A full Malwarebytes scan reveals nothing, as does an Avira scan itself despite the fact that it was the Avira Guard which gave the warning.

Can anyone help, please?

Is your Malwarebytes up to date? Post the log here and then see if someone can help

LizEstelle

Fully up to date. I always check for updates before I run a scan.

The log is hardly worth looking at:

Malwarebytes' Anti-Malware 1.50.1.1100
https://www.malwarebytes.org

Database version: 6092

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

20/03/2011 17:23:42
mbam-log-2011-03-20 (17-23-42).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 282633
Time elapsed: 1 hour(s), 3 minute(s), 17 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

GunJack

I've seen that with avira before, not normally something to worry about. However, you could run combofix as a last check

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

and post the log back here

LizEstelle

Thanks.

What exactly is this and would downloading it cause any incompatibilities? I use Vista Basic, Chrome and, as mentioned, have Avira installed already.

GunJack

Combofix is a powerful malware remover. all you need to do is turn off avira before you run combofix. Download and save it to desktop before running CF. It will prompt you to turn avira off before it starts scanning

macman

Using IE7 doesn't help your security much. Suggest you update to IE8, which you should have got automatically via Windows Updates.

GunJack

macman wrote: »

Using IE7 doesn't help your security much. Suggest you update to IE8, which you should have got automatically via Windows Updates.

gotta be honest, I still use IE7 on this pc with XP...don't like 8 much compared to 7. Mind you, use Opera more than IE these days...