Anti-virus scan found infection-should I be worried?

wendydarling

Hi my anti-virus software found an infection when doing a scheduled scan, it said it was virus exploit. Should I be worried? Could someone have stolen personal details? Sorry being really thick, don't know anything about the capabilities of viruses.:o

Just to add the scanner has locked it away in the virus vault.

Thanks

RussJK

What's your antivirus? What's the file, anything you've downloaded? Also what was the location of the file.

If in doubt, can upload files to https://www.virustotal.com

May as well do the usual secondary scans:
1. Malwarebytes Anti-Malware (install, update, do a full scan if you want to be thorough, clean anything it finds post a log if you find anything)
https://www.malwarebytes.org/mbam-download.php

2. Hitmanpro (don't install, just do single scan, it's very quick)
https://www.surfright.nl/en/hitmanpro
Cure anything it finds, don't freak out over cookies

3. Make a Hijackthis log... save this file to the desktop:
http://www.trendmicro.com/ftp/products/hijackthis/beta/HijackThis.exe
then hold LEFT SHIFT and RIGHT CLICK to Run as Administrator, then do Scan and Save log. Paste the log that comes up in notepad, don't Fix anything.

wendydarling

Thank you very much.
All scans came back completely clean.

wendydarling

Hi here is my hijack this log
Log deleted as have had all the help I need, thanks again to RussJK

RussJK

Looks fine You should probably uninstall the "mcafee security scan" as it has no business being there and doesn't help at all.

If you want to speed things up a little bit, you can go into Start and type in "msconfig" and enter, then go to Startups. You can safely untick:
[GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
[SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
[QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
[Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
[Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

and probably the Sony Ericson software.

You should also double check what version of Java is installed, and update if needed:
http://www.java.com/en/download/installed.jsp

RussJK

Just doublechecking, you've got Roboform running, but I don't see the usual associated entries with it. Is it running normally?

wendydarling

Hi, I put roboform on but haven't actually started using it yet so haven't filled my details in or anything yet. Should I remove it or is it ok? I am intending to use it soon.
Thanks again for your time
Also is it safe to leave my log on here or is there info on there that I have left on that shouldn't be?

RussJK

No Roboform's fine, just was curious why it didn't look like it was on properly It normally also has some startup entries, BHOs, context menu entries, etc and they weren't in the log. Thanks for explaining.

Only thing the log has is your Windows login name, so that's up to you.