[Kal-Zakath]

I got a nasty UKASH cisis Virus a month ago. I was able to remove it- only to get the Smart Fortess Virus. I was able to remove that only to find a very stubborn Registry trojan that would not go away.

Malwarebytes was able to detect it and remove it, but, upon start up it would reappear.



Another program- Trojan killer - was also able to detect the Trojan (stating the trojan file was missing and could not start, it was able to give me the File Name)

Spybot and TDSS Killer were unable to detect said Trojan.


The Trojan did not seemingly effect my machine in anyway. There were no internet issues, software installation worked fine, as did any application I choose to run. However Banking and purchasing was out of the question as long as the Trojan was on my computer.

Using Autoruns I was finally able to find and delete the trojan. Neither malwarebytes or Trojan Killer detects it now.


However before I did this I did something stupid.


I ran another Maywarebytes scan. I Choose to Open File location rather the remove it and malwarebytes took me to the Curfile registry entry of which there were two files. I deleted one hoping that would remove the Trojan. I know I am not supposed to do that but...

I am unsure as to what actually removed the trojan The autorun or registry file deletion.

Luckily there are no major problems with my machine. Internet, Games, etc work fine



The only annoyance is that upon start up when booting to my desktop I takes longer then it use to, and an error message appears :



[*]"There was a Problem Starting C:\ProgramData\Malwarebytes'anti malware\cleanup.dll"
[*]"The specified module could not be found"


I press Okay and my machine starts up as normal. However I don't know if this will cause other problems down the road.

Anyone know what this is or what to do?

I have uninstalled malwarebytes and reinstalled it, to no avail. I cannot find this .dll file anyware.


Thanks!

[Advertisements]

Hi there and sorry for the delay - could I have a look at the system

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
• Select All Users
• Under the Custom Scan box paste this in
  netsvcs
  %SYSTEMDRIVE%\*.exe
  /md5start
  services.*
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  /md5stop
  HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Local\AutoProxyCache /s
  CREATERESTOREPOINT
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Post both logs

THEN

Download aswMBR.exe ( 4.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan



On completion of the scan click save log, save it to your desktop and post in your next reply

[Essexboy]

Hi there and sorry for the delay - could I have a look at the system

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
• Select All Users
• Under the Custom Scan box paste this in
  netsvcs
  %SYSTEMDRIVE%\*.exe
  /md5start
  services.*
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  /md5stop
  HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Local\AutoProxyCache /s
  CREATERESTOREPOINT
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Post both logs

THEN

Download aswMBR.exe ( 4.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan



On completion of the scan click save log, save it to your desktop and post in your next reply

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.