Abebot, System Integrity Scan Problems

[Tkcatch]

Hoping you guys can help...

HiJackThis LogFile is attached

 

[pimpmypc]

where did that error message come from is that a program that abebot?

 

[Tkcatch]

I orignally got a popup saying malware (I believe) in file C:\windows\wmr.exe saying i was infected with an abebot. I haven't gotten that pop-up in about an hour not, bu now I'm getting something that says System Integrity Scan Wizard, which didn't show up before.

 

[pimpmypc]

symantec says its a backdoor what antivirus and antispyware are you using? ill be back in like 30 mins but i will help sort this problem out when i get back.

 

[Tkcatch]

I have Spybot, Ad-Aware, and Avast! running right now. I've run each one at least twice and cleaned out everything it came up with. Tried googling the problem and came across you folks, so I figured I'd try doing what everyone else did, and send you a logfile lol.

 

[pimpmypc]

wat did the scans find im back

 

[Tkcatch]

that's an excellent question... there were a lot of tracking cookies, and a some other crap, but i deleted them all and honestly... can't find em again

 

[Tkcatch]

The Spybot had found
GoldenPalace.Casino,
Zlob.Downloader.vcd,
Inet Delivery,
MagicControlAgent,
Microsoft.WindowsSecurityCenter.TaskManager,
NousTech.UltimateFakeSecurityCenter
Smitfraud-C
Smitfraud-c.gp
Virtumonde

I can't find what Ad-Aware found and I deleted

 

[pimpmypc]

the cookies are nothin. try runnin this scan first. shouldnt take more then an hour. http://www.eset.com/onlinescan/ . make sure the avast shields are all set to high n make sure u update it everyday i have avast too its the best ive used.

 

[pimpmypc]

...... zlob is hard to remove u definetly wanna run the scan i posted then run the microsoft malicious tool. http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en do the full scan.

 

[Tkcatch]

The Ad-Aware found these:
Adware.Admedia
CoolWebSearch
Favoriteman
Golden Palace Casino
Holystic-Dialer
InternetDelivery
InvictusMediaUpdate
JRaun
TIB Browser
Win32.TrojanClicker

I'll run the online scan and let you know how it goes.

 

[pimpmypc]

wow wat u dl thats alot of malware

 

[pimpmypc]

oo try spyware doctior free edition its good for finding that stuff. its free scan and removal u can uninstall spyware doctor after if u want but make sure u go in settgins and scan for rootkits then update it then run a full scan and let me know what that finds too. http://www.download.com/Spyware-Doctor-Starter-Edition/3000-8022_4-10704508.html?tag=lst-1

 

[Tkcatch]

i actually didn't download anything... that i know of anyway. i think i was on facebook or something and hit a link that started firing porn popups at me and crap... big pain in the @$$

 

[pimpmypc]

thats y u clicked a link

 

[pimpmypc]

avast detect nething when it happened?

 

[Tkcatch]

Just got the original pop-up again, so I can tell you exactly what it is. It's a window with a red border title "Security System Warning"

Alert Details
File:
C:\WINDOWS\wml.exe
Threat:
Abebot

Possible Spyware infection has been detected on your computer by Security System.

To remove detected threat you need to update you PC-Antispyware protection

Then is has a link to the "website" for their protection...

Lots of fun

 

[pimpmypc]

thats a fakeb wat did avast find?

 

[pimpmypc]

ui hated the zlob trojan i was ready to reinstall windows i reinstalled anyways like a month after cuz mcafee ruined my computer lol

 

[Tkcatch]

Avast didn't detect anything initially... it took about a half hour for it to say anything and I don't remember what it said. I just tried checking the virus chest and it didn't have the infected files in it anymore.

 

[Tkcatch]

oh... don't tell me that man... i don't want to have to reinstall everything lol

 

[pimpmypc]

do you have all the shields on high?

 

[Tkcatch]

i do now... i thought i did before, but when i checked they were all on normal

 

[pimpmypc]

set to high then see if it finds anything

 

[Tkcatch]

that's what i just tried doing... it got about half way through and i stopped it when you told me to do the other two scans lol... everything was going really slow