[Resolved] Brontok again with H & VB-122

Well if you ran the Flash Disinfector before you ran Kaspersky it did not clean it out. You may either want to try removing those files or even better just reformat that drive… Let me know how you make out.

Should I use Kaspersky to remove the listed files? I apologize for keep asking what may be stupid repetitive questions. Avast! was unable to move them or remove them. Thanks anyway. \\Lister

Reformatting means removing everything and re-installing? Wow! But if that's it so be it.

PL

Dave: I am currently running a scan with Avast! My impression by looking at the report on the Kaspersky scan is that the infected areas are all on the F: or memory stick. Do you agree? As I say I am awaiting a result from the Avast! Peter

Should I use Kaspersky to remove the listed files? I apologize for keep asking what may be stupid repetitive questions.
Avast! was unable to move them or remove them.

The Kaspersky scanner I gave you won't remove files.

Reformatting means removing everything and re-installing? Wow! But if that's it so be it.

Just on the F drive, the flash drive. Not your whole PC.

Dave: I am currently running a scan with Avast! My impression by looking at the report on the Kaspersky scan is that the infected areas are all on the F: or memory stick. Do you agree? As I say I am awaiting a result from the Avast!

Yes, looks like all the infections are on the F drive. If you want you can just delete them manually using Windows Explorer. Here they are…

F:\System\Apps\EC30627F-0195-44d4-8C24-1B09F3C02C50\Exec\Exec.exe
F:\System\Apps\285E6953-BF3C-4445-9376-3FE5D7F645B2\285E6953-BF3C-4445-9376-3FE5D7F645B2.exe
F:\System\Apps\1F30627F-0195-44d4-8C24-1999F3C02C50\Data\Data.exe
F:\System\Apps\1F30627F-0195-44d4-8C24-1999F3C02C50\1F30627F-0195-44d4-8C24-1999F3C02C50.exe
F:\System\Apps\0DE4F643-C398-46ec-9339-2362F2311932\Data\My Skype Pictures\My Skype Pictures.exe
F:\System\Apps\0DE4F643-C398-46ec-9339-2362F2311932\0DE4F643-C398-46ec-9339-2362F2311932.exe
F:\System\Apps\Apps.exe
F:\AUTORUN.INF

Question, when you ran the flash disinfector was the flash drive inserted in the USB port? You may want to try it again.

Dave: Thanks for your patience! Running Avast! I found only instances of : C:\WINDOWS\Downloaded Installations\MediaFACE 4.0.msi\Data1.cab\MFHookManager.dll listed as adware. But this is found as you see in the Windows directory and shows an installation of 2003, approx the age of the computer. I would no think that a delete of this is indicated. ?? As for the memory stick [F: drive] I'd rather just get rid of it. So my question is: if I leave the above file in place what is the chance of harm? Peter

That file is likely just Adware…nothing too serious and if it's been there that long I wouldn't worry too much about it. Do you know what that MediaFACE software is though? If not you may just want to delete the whole folder. As far as that flash drive goes you don't need to get rid of it….you can just reformat it and it will be fine to use.

Just to wrap up here…

Now that you are clean here are some suggestions.

How do I protect myself from infection?
Can you tell me how I got infected?

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.