Show Posts
1
Malware removal help / Re: Not sure if this scan indicates that I am infected
« on: June 22, 2015, 12:58:25 PM »
Hi Curson, Thank you for confirming the clear scan. I posted a more detailed description of my problem on BleepingComputer.com (http://www.bleepingcomputer.com/forums/t/579994/frequent-avast-threat-detected-warnings-no-infectionions-found/)
I don't know how to generate a text report in Avast (my ignorance?), but my last 3 scans (1 x full-system, 2 x boot-time) came up clean and hence there are no detailed reports I can look up. Prior to that, immediately after inadvertently installing adware (Cinem Plus 2.4cV26.05) bundled in a download, I had 3 scans which showed detections. These were:
Scan 1 (Full System Scan) found:
JS:Redirector-BWW (successfully removed)
Win32:Evo-gen [Susp] (which I elected to skip because I believed it was a false positive - it corresponds to compiled Fortran90 code I wrote some years ago)
Scan 2 (Boot Time Scan) found:
hqghumeaylnlf.exe PUP:Win32:GenMaliciousA-III [PUP] (but could not remove because permission was denied)
Scan 3 (Boot Time Scan, run as administrator) found:
Win32:GenMaliciousA-III (the same detection above, but had been quarantined by ADWCleaner and renamed to hqghumeaylnlf.exe.vir. It was moved to chest)
Win32:Evo-gen [Susp] (the same detection as the first scan, this time moved to chest)
The 3 subsequent Avast scans have come up clean (no detections).
Nevertheless, I still get Avast "Threat Detected" warnings (always when my computer wakes up from sleep, but also at random intervals thereafter) where apparently my computer has tried to connect to a URL with a .dll file. Recent examples include (all preceded by http://)
alwaysisobar.com/4141/TroubleFix_142669690001746.dll
simplesitescan.net/4141/LibraryProc_142667285206710.dll
bestdriverstar.net/4141/CutterGeneration_142669028246641.dll
anythicago.com/4141/CutterSystem_142669222915982.dll
simplesitescan.net/4141/CutterGeneration_142669028215736.dll
alwaysisobar.com/4141/SystemInclude_142652930467594.dll
opticguardzip.net/4141/RelayTurbo_142668814316255.dll
simplesitescan.net/4141/SystemVisual_142669159151878.dll
simplesitescan.net/4141/TrimModule_142669092997470.dll
alwaysisobar.com/4141/afterguard_142667076317268.dll
Are there other diagnostic tools I might run to see if there is an infection?
Thank you again for your help!
I don't know how to generate a text report in Avast (my ignorance?), but my last 3 scans (1 x full-system, 2 x boot-time) came up clean and hence there are no detailed reports I can look up. Prior to that, immediately after inadvertently installing adware (Cinem Plus 2.4cV26.05) bundled in a download, I had 3 scans which showed detections. These were:
Scan 1 (Full System Scan) found:
JS:Redirector-BWW (successfully removed)
Win32:Evo-gen [Susp] (which I elected to skip because I believed it was a false positive - it corresponds to compiled Fortran90 code I wrote some years ago)
Scan 2 (Boot Time Scan) found:
hqghumeaylnlf.exe PUP:Win32:GenMaliciousA-III [PUP] (but could not remove because permission was denied)
Scan 3 (Boot Time Scan, run as administrator) found:
Win32:GenMaliciousA-III (the same detection above, but had been quarantined by ADWCleaner and renamed to hqghumeaylnlf.exe.vir. It was moved to chest)
Win32:Evo-gen [Susp] (the same detection as the first scan, this time moved to chest)
The 3 subsequent Avast scans have come up clean (no detections).
Nevertheless, I still get Avast "Threat Detected" warnings (always when my computer wakes up from sleep, but also at random intervals thereafter) where apparently my computer has tried to connect to a URL with a .dll file. Recent examples include (all preceded by http://)
alwaysisobar.com/4141/TroubleFix_142669690001746.dll
simplesitescan.net/4141/LibraryProc_142667285206710.dll
bestdriverstar.net/4141/CutterGeneration_142669028246641.dll
anythicago.com/4141/CutterSystem_142669222915982.dll
simplesitescan.net/4141/CutterGeneration_142669028215736.dll
alwaysisobar.com/4141/SystemInclude_142652930467594.dll
opticguardzip.net/4141/RelayTurbo_142668814316255.dll
simplesitescan.net/4141/SystemVisual_142669159151878.dll
simplesitescan.net/4141/TrimModule_142669092997470.dll
alwaysisobar.com/4141/afterguard_142667076317268.dll
Are there other diagnostic tools I might run to see if there is an infection?
Thank you again for your help!
