MS(AV) MicroAV.exe and leftovers

Status
Not open for further replies.

stud171194

Posts: 6   +0
I have been trying to fix the problems that came from an infected download for a few days now and I just can't seem to get it all off of my system.

First my symptoms were:

-MicroAntivirus pop-ups every few minutes
-Web redirects whenever a link had been selected
-"Virus Alert" displayed next to the clock
-Random shortcuts appeared on my desktop like "free porn" and "casino" etc.
-Windows update not able to be enable because whenever i would goto services and enable it it would immediately change back to disable, and when i ran the update it gave me an error 1058.
-items like mycomputer and control panel were missing from my start menu
-in windows explorer the local drive c wasn't viewable.
-the task manager was "disabled by the administrator" even though i was signed on as the default administrator provided by XP
-fqbewlna tool bar stuck in ie7

Steps I took to fix the problem:
Ran:
McAffee Stinger
ad-aware 2008
smitfraudfix (in safe mode as it instructs to do so)
aml registry cleaner
a-squared hijack
PC tools Antivirus free version

Symptoms the remain:
-unable to visit certain sites because a fake "not able to connect" covers the site (know this because I was able to see the full decoy when a proxy was used)
These webs sites include all microsoft support pages and any malware removal site.
-The BHO toolbar is still hangin out in my ie7
-I still cannot enable automatic update (my event log and BITS work fine though)
I suspect this was a trojan contracted by a Bittorrent download.

I tried to put the hijackthis log from my comp here but that made my post too long so i will reply with that information.

If you feel like you want to take a crack at it I would love to have the internet back again without using proxies all the time and have the ability to use my windows update. Thanks.

~Kris
 
stud171194

You MUST follow the guide (as mentioned earlier by me)

You MUST attach
attach.gif
the logs, not paste them in a new post

I have now stated this twice to you
 
ok cool (actually I noticed I posted at the same time you did, so probably crossed paths a bit)

But seeming we're on, correct format and all.
Instead of replying to yourself, in future just use the "Edit" button (in the lower right hand corner of your posts) to Add to your replies (if yours is still the last message posted)
 
Yes I see

And with all those games in your HJT log I'm not surprised

You can remove this one immediately
But running CCleaner can also remove the temp files
O4 - HKLM\..\Run: [RRT-Auto] C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\K10AKRZG\RRT[1].exe auto

How's it actually performing at the moment? (well after restrart, after you remove the above entry)
 
Thanks for the advice, as soon as i get off work I will take care of that file and run the cleaner.

Oh, and it is working very well comparatively, and I was also able to install SP3 for XP. The internet works well now, and the BHO toolbar is no longer hangin out in my browser!
 
micro av fix

I have been trying to fix the problems that came from an infected download for a few days now and I just can't seem to get it all off of my system.

First my symptoms were:

-MicroAntivirus pop-ups every few minutes
-Web redirects whenever a link had been selected
-"Virus Alert" displayed next to the clock
-Random shortcuts appeared on my desktop like "free porn" and "casino" etc.
-Windows update not able to be enable because whenever i would goto services and enable it it would immediately change back to disable, and when i ran the update it gave me an error 1058.
-items like mycomputer and control panel were missing from my start menu
-in windows explorer the local drive c wasn't viewable.
-the task manager was "disabled by the administrator" even though i was signed on as the default administrator provided by XP
-fqbewlna tool bar stuck in ie7

Steps I took to fix the problem:
Ran:
McAffee Stinger
ad-aware 2008
smitfraudfix (in safe mode as it instructs to do so)
aml registry cleaner
a-squared hijack
PC tools Antivirus free version

Symptoms the remain:
-unable to visit certain sites because a fake "not able to connect" covers the site (know this because I was able to see the full decoy when a proxy was used)
These webs sites include all microsoft support pages and any malware removal site.
-The BHO toolbar is still hangin out in my ie7
-I still cannot enable automatic update (my event log and BITS work fine though)
I suspect this was a trojan contracted by a Bittorrent download.

I tried to put the hijackthis log from my comp here but that made my post too long so i will reply with that information.

If you feel like you want to take a crack at it I would love to have the internet back again without using proxies all the time and have the ability to use my windows update. Thanks.

~Kris
 
I got this nasty virus over the weekend. I ran ever kind of antivirus available. To no avail. Nothing deleted this virus and it's after affects. I finally had to reinstall my operating system. That's all that worked. Sorry.
 
Status
Not open for further replies.
Back