Virus Infection?

Lakshmi7

I thought a friend of mine had sent me a forward, but when I clicked on the link, I got a page up saying I have been infected with a virus and windows system tools will scan the system for infected items. I closed the window straightaway, but I'm not sure if I've now got a virus on my computer as this is the second time I've had that message.

The first time was when I was visiting a trusted website, and I was trying to copy a link. I closed the page that time as well, but as it's the second time this has happened in about a week, I'm assuming I've got something on my computer.

I've got Avira on my laptop, which hasn't picked it up.

Does anyone have any ideas?

Browntoa

follow this

http://www.bleepingcomputer.com/virus-removal/remove-system-tool

post the malwarebytes log file for us

GunJack

restert in safe mode with networking,

download, update and full scan with malwarebytes
http://www.filehippo.com/download_malwarebytes_anti_malware/
fix all it finds and post the log

download HiJack This, run and save the logfile and post it back here. DO NOT attempt to fix anything in hjt without advice
http://www.filehippo.com/download_hijackthis/

GunJack

Browntoa wrote: »

follow this

http://www.bleepingcomputer.com/virus-removal/remove-system-tool

post the malwarebytes log file for us

^^^^^^^that's more comprehensive straight-off if you can follow it all

RussJK

Lakshmi7 wrote: »

I've just run that programme and I got this message:

Malwarebytes' Anti-Malware has encountered a problem and needs to close. We are sorry for the inconvenience.

In this case you almost certainly have a trojan/rogue app on the computer. Don't worry, you should be able to sort it if you follow the link that Browntoa provided.

GunJack

have you followed the bleeping computer steps ?? Inc checking for a proxy and running RKill ??

tgroom57

A mate of mine had Palladium recently.

see link - instructions to remove are half a page down.

http://answers.microsoft.com/en-us/protect/forum/protect_scanning/virus-palladium-help/6e837554-4374-4709-8e51-e878ac8817e1

GunJack

Lakshmi7 wrote: »

I just ran the scan.

How do you check for a proxy and run RKill?

follow Browntoa's link to the bleepingcomputer site, it's the full step-by-step instructions

Lakshmi7

GunJack wrote: »

follow Browntoa's link to the bleepingcomputer site, it's the full step-by-step instructions

I've checked that, and the box to allow a proxy to run is unchecked.

When I ran RKill, I got this log:

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Rkill was run on 27/03/2011 at 14:45:40.
Operating System: Microsoft Windows XP

Processes terminated by Rkill or while it was running:
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

Rkill completed on 27/03/2011 at 14:46:07.

The Full Scan has just finished and this is the log:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6182
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
27/03/2011 15:44:37
mbam-log-2011-03-27 (15-44-37).txt
Scan type: Full scan (C:\|)
Objects scanned: 202897
Time elapsed: 52 minute(s), 18 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

Does that mean I'm okay?

ETA: I wasn't having any problems before I ran the scan, but now I can't bookmark pages. Help!!!

Browntoa

follow up with this

http://www.bleepingcomputer.com/combofix/how-to-use-combofix