help needed ...malware?

yummy_mummy_2

Think I am infected ....did an update for adobe reader and think that it was Trojan ...Adobe reader x 10.1.0 ...have done scan with Malwarebytes but nothing showed up ..same with Adwcleaner ..have tried to uninstall updates but unable to remove with uninstall with add or remove program. Windows 8 btw

Can anyone tell me how to get rid of this ...also tried to do system restore but it would not do it ? Have googled solutions but am scared to download anything just in case... would rather ask you peeps in here what I should try.

Have also posted a Hijack this log in earlier thread yesterday .

danthemoneysavingman

what is it you believe is malware? if MBAM and ADWC didn't flag anything, it is unlikely it IS malware.


Please describe what this "malware" is doing

yummy_mummy_2

Hijack this would not save log? tried to do a system restore and it failed....would not let me uninstall updates that were put on with Adobe reader using remove/add programs? just seems a little odd...also Googled... said Trojan?

Would MBAM or ADWC pick that up...?

danthemoneysavingman

sorry you're not making sense (to me). you say you ran MBAM and ADWC and they showed nothing. What is it you think is a Trojan? please try to answer my previous question. be as specific as you can. Acrobat reader is not and does not install any Trojan. Unless you downloaded something else.


Try booting into safe mode (restart computer, continually tapping F8 - then choose safe mode with networking from the options), then running malwarebytes (make sure you fully update it first)


Let us know what you can from this endeavour, and please answer my question :-)

yummy_mummy_2

I acquired it as an Adobe red icon appearing on my task bar... automatic update.
Have learned it is referenced on the internet as 32.fakeupver.trojan?

Will tapping F8 work with windows 8 or Tapping F8 while holding down shift?

Sorry I am new to windows 8... was so much easier when I had old computer with XP knew what I was doing with that .

debitcardmayhem

You could try SuperAntispyware tutorial here and the download link ison that page http://www.bleepingcomputer.com/virus-removal/how-to-use-superantispyware-tutorial

danthemoneysavingman

yummy_mummy wrote: »

I acquired it as an Adobe red icon appearing on my task bar... automatic update.
Have learned it is referenced on the internet as 32.fakeupver.trojan?

Will tapping F8 work with windows 8 or Tapping F8 while holding down shift?

Sorry I am new to windows 8... was so much easier when I had old computer with XP knew what I was doing with that .

Hi,
you restart your computer. Or when you turn it on. Start tapping F8 (aside: this is related to BIOS not your windows version).
A list of options will appear. Then do as I suggest above, let us know.


ASIDE:
There are a couple of simple things you can do to get windows 8.1 working nicely (hopefully you're upgraded to windows 8.1 - if not, you should do this! get it from the windows store in windows 8)
You can easily set it up to boot straight to desktop. Let me know if you need the link from google.
You can also get instructions helping you to set it so that when you click on the windows icon (in 8.1, bottom left of desktop), you are presented with the list of programs you have.
Then you have a much better operating system, with MS support, and should feel at home much quicker

danthemoneysavingman

Here is some text I just found about your purported problem, reflects what I (& DCM) said:

quote:
"If you acquire this Adobe Reader X 10.1.1 Update from a fake email messages that masquerade as legitimate sofwtare upgrade from Adobe then I am 100 percent sure that it was part of the Braviax family of Trojans.
http://www.precisesecurity.com/tools-resources/adware-tools/malwarebytes-anti-malware
Make sure that database is update and you run the scan in safe mode of Windows. My second recommended anti-malware (based on my experience) is Superantispyware. It may catch other threats not detected earlier."


END OF QUOTE

yummy_mummy_2

Did SuperAntispyware scan ...found a load of tracking cookies but nothing else? So can I assume all is well and I am just being paranoid... or is this thing very good at hiding it's self ? Did not get update from email just a prompt to say updates.

Not done safe mode yet tho ...will try that later .

debitcardmayhem

yummy_mummy wrote: »

I acquired it as an Adobe red icon appearing on my task bar... automatic update.
Have learned it is referenced on the internet as 32.fakeupver.trojan?

Will tapping F8 work with windows 8 or Tapping F8 while holding down shift?

Sorry I am new to windows 8... was so much easier when I had old computer with XP knew what I was doing with that .

OK Right click on that icon and it should show a popup saying along the lines of Unpin from Taskbar, Adobe whatever it is .....
Right click on the Adobe one and select properties
In the target box it will tell you what it is and where it is , Try uploading that file to VirusTotal and ask them to scan it https://www.virustotal.com/ . It may have already been scanned (working on the files hash totals etc).

It may make us all a bit more aware if you post some of the logs from some of the things you have tried too. I will look for the work around for HJT Logs , the fact it wouldn't save one is probably because you didn't run as Administrator.

debitcardmayhem

Hijack this problem is here http://forums.moneysavingexpert.com/showpost.php?p=32325809&postcount=1

(if you have a problem running hijackthis (For some reason your system denied write access to the Hosts file error etc) on vista/W7, right click on hijackthis.exe and run as admin, if that doesn't work, try again holding down the shift key and run as admin). If you are unable to post the log on mse, due to this site's posting bug, upload it here http://freetexthost.com and post a link to the text file instead.