Cant remove infected file

Olaf69

New member
Local time
9:53 PM
Messages
9
I used this forum to find that I had an issue with a driver that I had to remove but I couldn't do it manually or re-name to .old as it said 'can't read from the source file or disk'

I was then given advice to use Malwarebytes to detect and remove the Malware from PC.

Malwarebytes detects the infected file and comes up with the following report:

Files Infected:
c:\windows\system32\drivers\ymiqvflos.sys (Trojan.Bubnix) -> Quarantined and deleted successfully.

The problem is that it tells you to re-boot to remove properly but the driver is still there when I restart and if you scan again it detects the same thing again. I have tried in safe and normal mode with the same result.

Any advice on how to remove this would be appreciated.

Thanks
 

My Computer My Computer

At a glance

Windows 7 Professional 32bitAMD 5050e2GBATI Radeon HD 4550
Computer Manufacturer/Model Number
Home build
OS
Windows 7 Professional 32bit
CPU
AMD 5050e
Motherboard
Gigabyte GA-MA78GM-US2H
Memory
2GB
Graphics Card(s)
ATI Radeon HD 4550
Sound Card
ATI
Monitor(s) Displays
Samsung 42" LCD TV
Hard Drives
Western Digital WD3200AKS - 320 GB for OS
Samsung 753LJ internal storage
Samsung story time 1 TB external for back up
Case
Antec

My Computer My Computer

At a glance

Windows 7 x64Core2Quad Q9400Corsair 8 GbEAH ATI 5870 1 Gb
Computer Manufacturer/Model Number
ASUS
OS
Windows 7 x64
CPU
Core2Quad Q9400
Motherboard
ASUS P5Q EM Do
Memory
Corsair 8 Gb
Graphics Card(s)
EAH ATI 5870 1 Gb
Sound Card
Realtek HD 7.1
Monitor(s) Displays
ASUS 27"
Screen Resolution
1280 x 720
Hard Drives
Maxtor 320 x 2 RAID 0
PSU
650 W
Cooling
Zalman
Keyboard
Sweex Multimedia
Mouse
A4 Tech 2 wheels 5 buttons
Other Info
http://www.youtube.com/watch?v=nvJXlBH6yJI
Open Malwarebyte and under the tab "More Tools" run "FileASSASSIN"

It might help to boot into Safe mode and run from there.

Jim :geek:
 

My Computer My Computer

At a glance

Windows 8.1 Pro w/Media Center 64bit, Windows...Phenom II X6 1100TCrucial Balistic 8gb DDR3-1866 CL9MSI R6850 Cyclone IGD5 PE
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home Built
OS
Windows 8.1 Pro w/Media Center 64bit, Windows 7 HP 64bit
CPU
Phenom II X6 1100T
Motherboard
ASUS M5A99X EVO
Memory
Crucial Balistic 8gb DDR3-1866 CL9
Graphics Card(s)
MSI R6850 Cyclone IGD5 PE
Sound Card
On Board
Monitor(s) Displays
ASUS VE258Q 25" LED with DVI-HDMI-DisplayPort
Screen Resolution
1920 x 1080
Hard Drives
Two WD Cavier Black 2TB Sata III, WD My Book Essential 2TB USB 3.0
PSU
Seasonic X650 80 Plus GOLD Modular
Case
Corsair 400R
Cooling
Antec Kuhler H2O 620, Two 120mm and four 140mm
Keyboard
Logitech K120
Mouse
Logitech Marble Mouse USB, Logitech Precision Game Pad
Internet Speed
15MB
Antivirus
Norton IS 2013, Malwarebytes Pro Beta 2
Browser
IE-11, FF-27
Other Info
APC UPS ES 750, Netgear WNR3500L Gigabit & Wireless N Router with SamKnows Test Program, Motorola SB6120 Gigabit Cable Modem. Brother HL-2170W Laser Printer, Epson V300 Scanner
Please download the OTM.exe by OldTimer.

* Save it to your Desktop.
* Please double-click OTM.exe to run it.
* Copy the commands with file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):


:files
c:\windows\system32\drivers\ymiqvflos.sys
:commands
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[REBOOT]
* Return to OTM.exe, right click in the "Paste Instructions for Items to be Moved" window (under the light yellow bar) and choose Paste.
* Click the red Moveit! button.
* A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
* Close OTM.exe


If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
 
Last edited:

My Computer My Computer

At a glance

Winbdows 7 ultimate x64 | Ubuntu 12.04 x64 LTSCore 2 Duo e7400 @ 2.90GHz3GB DDR2Asus Nvidia GTX 560Ti 1GB
Computer Manufacturer/Model Number
HCL
OS
Winbdows 7 ultimate x64 | Ubuntu 12.04 x64 LTS
CPU
Core 2 Duo e7400 @ 2.90GHz
Motherboard
Gigabyte G31M-ES2L
Memory
3GB DDR2
Graphics Card(s)
Asus Nvidia GTX 560Ti 1GB
Sound Card
On-board
Monitor(s) Displays
HCL eZeeBee 18.5" LCD
Screen Resolution
1366x768 @ 60Hz
Hard Drives
Western Digital 320GB
PSU
Corsair CX500 V2 500W
Cooling
Stock
Keyboard
Stock
Mouse
Stock
Internet Speed
15-25kBps D/L | 10kBps U/L | Hey Don't laugh
Back
Top