What is sbubeper.dll?

RussJK

MilkyJoe wrote: »

I use my mobile as a modem if that's of any use. I've moved it to the quarantine this time though.

Oh I see, that could be how you've gotten this then. A mobile phone won't have a hardware firewall to protect your computer, so you are vulnerable to all sorts of things if you aren't behind a proper router modem.

Avira Antivir free is a fantastic antivirus, but it's purely an antivirus - it doesn't scan web pages, it doesn't block internet worms, etc... it only deals with files present on your computer.

Do you have any other way of connecting to the internet? If not, I would actually advise you to switch to an antivirus that also has a network shield such as Avast free. It's antivirus component isn't as good as Avira's, but it is essentially a full suite as opposed to Avira free package which just has a scanner and a fileguard.

MilkyJoe

I haven't done anything about hosts files yet. I'm going to investigate that more later (whilst sober; maybe tomorrow) I'll have a look at AntiVir options then as well.

I couldn't find the system restore settings via the method you told me (I'm sure its there, I'm just a little tipsy) I had to press windows+pause/break. What does turning off system restored do?

Malwarebytes is still scanning...

MilkyJoe

RussJK wrote: »

Oh I see, that could be how you've gotten this then. A mobile phone won't have a hardware firewall to protect your computer, so you are vulnerable to all sorts of things if you aren't behind a proper router modem.

Avira Antivir free is a fantastic antivirus, but it's purely an antivirus - it doesn't scan web pages, it doesn't block internet worms, etc... it only deals with files present on your computer.

Do you have any other way of connecting to the internet? If not, I would actually advise you to switch to an antivirus that also has a network shield such as Avast free. It's antivirus component isn't as good as Avira's, but it is essentially a full suite as opposed to Avira free package which just has a scanner and a fileguard.

Really? Wow.

I chose AntiVir because I heard it was the "lightest". Having a crap computer and basic internet connection I thought it was the best. I thought no free anti-virus had real-time protection. I thought the modem was just a "gateway" and had nothing to do what the PC was receiving (in other words, what does it matter how the computer gets its info; and also the type of file being downloaded (exe or whatever)).

RussJK

MilkyJoe wrote: »

I haven't done anything about hosts files yet. I'm going to investigate that more later (whilst sober; maybe tomorrow) I'll have a look at AntiVir options then as well.

I couldn't find the system restore settings via the method you told me (I'm sure its there, I'm just a little tipsy) I had to press windows+pause/break. What does turning off system restored do?

Malwarebytes is still scanning...

The trojan can hide in the restore points, so the best idea is to delete them by temporarily disabling system restore:
http://support.microsoft.com/kb/310405

The hosts thing was for your immediate benefit, so that the trojan didn't download further things on your computer or potentially stop it stealing your data. You should have just done it then and there, it wouldn't have cost you anything and the instructions and automated program made it extremely simple even for a tipsy hand puppet...

Malwarebytes shouldn't still be running if you did a quick scan like I asked... and it doesn't stop you doing all the other things.

I think I'm going to leave this thread, as all the things you are going to need to do to get rid of this are already there (with the exception of prevention, and combofix which will need to be done after you've done the basics).

MilkyJoe

RussJK wrote: »

Do you have any other way of connecting to the internet?

No. I usually just use my mobile browser, but sometimes it's quicker and easier just to plug my phone in (to my PC). Should I change my internet settings to do stuff via the modem?

MilkyJoe

RussJK wrote: »

The trojan can hide in the restore points, so the best idea is to delete them by temporarily disabling system restore:
http://support.microsoft.com/kb/310405

The hosts thing was for your immediate benefit, so that the trojan didn't download further things on your computer or potentially stop it stealing your data. You should have just done it then and there, it wouldn't have cost you anything and the instructions and automated program made it extremely simple even for a tipsy hand puppet...

Malwarebytes shouldn't still be running if you did a quick scan like I asked... and it doesn't stop you doing all the other things.

I think I'm going to leave this thread, as all the things you are going to need to do to get rid of this are already there (with the exception of prevention, and combofix which will need to be done after you've done the basics).

Malwarebytes is still scanning after 1 hour(s), 15 minute(s). I've posted the quick scan results and all the info I've got.

The other things I will do later (via your instructions; I'm just not desperate for an internet connection right now - other than trying to sort this problem).

MilkyJoe

Malwarebytes just finished but because it found nothing malicious it didn't give me the option to save the log. How do I post the log?

RussJK

MilkyJoe wrote: »

Malwarebytes just finished but because it found nothing malicious it didn't give me the option to save the log. How do I post the log?

No need to post the log, but for your edification you'll find all the logs under the Logs tab in Malwarebytes. Let me know how you go with the other things tomorrow.