Some virus and others abnormalities...

[NouveauUtilisateur]

Dear Sirs:

I greet you cordially.
The reason for this communication is to request your invaluable help to disinfect my computer. The system analysis showed some problems and would like to know what I do now.
Attached to this communication the log generated by Kaspersky Virus Removal Tool, AVZ Antiviral Toolkit and HiJackThis.
I apologize for not properly express myself in English, because is not my language and I am using the Google translator to try to explain what I have written in earlier lines.
On the other hand, is the first time I participate in a forum via internet...I hope I expressed myself properly -or at least- I hope not to have committed breaches the forum rules.
In advance, thank you very much for your help.

Sincerely,

NouveauUtilisateur.

[Rene-gad]

Hi,
pls. make AVZ-Logs in NORMAL MODE.

[NouveauUtilisateur]

Hi,

The log of AVZ was in normal mode; only the KVRT was on safe mode.

[Rene-gad]

- Execute following script

begin
 QuarantineFile('D:\autorun.inf','');
end.

execute following script

begin
CreateQurantineArchive('C:\quarantine.zip');
end.

- Upload the C:\quarantine.zip over the link Upload quarantined files on the top of this page.

[NouveauUtilisateur]

Hi,

Thank you for your help.
I carry out the instructions you pointed me: both scripts have already been implemented successfully. Now attach the file "quarantine.zip" (I suppose in this case is not possible to encrypt it with the password "virus"), but I do not know if it worked, for I see that the file has been attached to this communication. Was it received? Is there anything else that should be done?

[Rene-gad]

You quarantine(s) are clean
Which program(s) show(s) any malware? In which file(s)?

[NouveauUtilisateur]

Hi,

Your news makes me happy. Again thank you for your help and time.
At this time I performed a new scan with the program AVZ. What worries me are part of the log generated indicating the suspicion of a Trojan: " D: \ MiniNT \ system32 \ Rasman.dll>>> Suspicion for Trojan-PSW.Win32.LdPinch.abxl (08A4B91D 09D80EB0 001C8E9C 0026267A 56320) " , but then says: " File quarantined succesfully (D: \ MiniNT \ system32 \ Rasman.dll) " and later included the following line: " D: \ autorun.inf HSC: Suspicion for hidden startup (high degree of probability)
File quarantined succesfully (D: \ autorun.inf) " , however these results were already out in the first log on an earlier. That means that if a Trojan horse, still remains? Or perhaps, is a false positive? Moreover receive a considerable number of red lines. I guess that this is abnormal, but do not know which correspond exactly: configuration problems (maybe resulting from certain programs) or consequences caused by viruses? This is something serious?
I await your response.
Sincerely,
NouveauUtilisateur.

[Rene-gad]

Hi,
these are neither false positives nor viruses. The files are clean, they was analyzed by specialists of Antivirus-Lab.
AVZ analyzes the behavior of the files and could suspect one or another file.

[NouveauUtilisateur]

Hi,

So for now, my computer is clean.
You did a great job. Thank you very much for your valuable assistance, time and patience.

Sincerely,

NouveauUtilisateur.

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 2
• Обработано файлов: 10
• В ходе лечения вредоносные программы в карантинах не обнаружены