Solved Avira free detected Ramnit.A

Status
Not open for further replies.
Run full Avira scan and report on any findings.
Make sure, Avira is updated.
 
Good morning, Avira ran overnight and found these three viruses:

TR/PSW.Zbot.905
TR/Crypt.XPACK.Gen2
TR/Crypt.XPACK.Gen2

All the viruses were found in C:\System Volume Information\_Restore

I have the option to repair all, should I do that?
 
I assume that this is the malware in the previous restore points that we want to delete as per your previous post.
 
Here is the OTL log


All processes killed
========== OTL ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes

User: All Users

User: Ben2
->Temp folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 3322 bytes

User: Sara
->Temp folder emptied: 0 bytes

User: Sara.BEN
->Temp folder emptied: 0 bytes

User: User1
->Temp folder emptied: 1975 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 10151476 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1707127 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 11.00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Ben2

User: Default User

User: Guest

User: LocalService

User: NetworkService

User: Sara

User: Sara.BEN

User: User1

Total Flash Files Cleaned = 0.00 mb

Restore points cleared and new OTL Restore Point set!

OTL by OldTimer - Version 3.2.14.1 log created on 10052010_064833

Files\Folders moved on Reboot...
File\Folder C:\WINDOWS\temp\TMP0000000F15B451C9DA6C58CC not found!

Registry entries deleted on Reboot...
 
Status
Not open for further replies.
Back