sharona,
When Malwarebytes Anti-Malware is done removing what it finds, a report opens in Notepad.
The log is also automatically saved and viewed by clicking the program's Logs tab.
Please provide the entire contents of the MBAM report in your reply.
From there, we can determine what else needs done. If you will, please hold off on MSE.
If you are dealing with Alureon, you need more than MBAM and MSE.
Thanks.
I've gotten the clean install of Win7 of the problem laptop going. I just redownloaded the WiFi driver and have burned it to a CD. My plan was to install the driver on the laptop so that I could download and install MSE and do an initial scan. Does that sound good?
As for scanning of the external HD, MABW ran for over 3 hours, freezing on and off. It found 13 objects, but one time it froze and just wouldn't start working again. Unfortunately, because the scan messed up, there's no log file for it.
I'm going to put it running again before going to bed. Hopefully, it finishes the scan.
Okay, I'll hold off on MSE. Should I also wait to install the driver and connect the laptop to the internet for updates?
I'm going to try rescanning the external hd with MBAM on my laptop now.
Before we get the laptop connected to the Internet lets go ahead and see if the virus has been removed .
On a clean PC download MBAR .
Download
Download
Drag zipped mbar folder from the Downloads folder to your Desktop
Right click on the Mbar.zip file and choose Extract all. Where it says " Files will be extracted to this folder " make sure it says " C:\Users\{Your Account Name}\Desktop\MBAR "
Make sure you place a check onand click on Extract button
Place the new mbar folder inside a flash drive . Plug the flash drive into the laptop with the infection. drag the MBAR folder to the desktop of the infected laptop . Inside the new MBAR folder ( without the zipper ) right click on MBAR.exe and choose Run as administrator
Click on the Next> button make sure it Updates then Let it scan by clicking on the Next> button
If it locates anything click on the Cleanup button
Once the program is done scanning it will create two files inside the MBAR folder
Files : system-log.txt and mbar-log
I left MBAM running last night like I said I would. When I woke up, the computer had shut itself off. I started up Windows, opened MBAM, and no new log. So, that leads me to believe MBAM froze again and didn't complete the scan. Is there something I can do to stop it from freezing? I've tried running in both normal and safe modes. Or is there a different program I could use less prone to freezing?
As for running MBAR:
- Quick Note: My personal laptop is Win7, Prem Home 32-bit -- dual-booted with Ubuntu
- I ran scans before I connected the external HD to scan, and got the all-clear
- During scans of the external HD in MBAM, MSE kept popping up with things that were caught and quarantined
- Did not see Alureon in the list, though, that I can remember (will try and get a screencap of detected items for you guys if you want)
- In order to download and burn MBAR to a CD (I'll be buying a thumb drive on the way home from work), I booted into Ubuntu because I was worried about those things MSE caught
- Transferred MBAR files from CD to the laptop I'm working on, ran as administrator, it didn't find anything.
VistaKing, I've never had issues with my laptop overheating before. It was working extra-hard yesterday, though, so that might have caused it.
Re: the other one, is it now okay to get the WiFi working and start updating it since MBAR gave it the all-clear? I won't be putting the backed-up files on it until we get the external hd seen to. But I was hoping to still get it going in the meantime to see if I run into any snags.
Don't want to overstep Vistaking, but I had a similar problem about a year ago, your problem is most likely in the MBR. In order to make sure whatever it is, is to do a reformat of the hard drive and reinstall Windows, this will ensure the MBR gets re written. By just doing a restore or clean install your MBR is staying intact which is why the problem is persisting after a just a restore.
Quote