Reply
Contributor
ablackcloak9
Posts: 25
Registered: ‎06-07-2010

Local Disk

I have a local disk that I didn't create or have access on my computer I just realized that I have it when I went to my computer. I just recently scan my computer and it had scanned up nothing,but when I left my computer on and my idle scan came up with like 6 trogans. I was looking at my security history and I saw a local q but i don't know where it came from and it was accessing the internet from a word.exe. I was wondering if anyone could help with this problem.

Super Spyware Scolder
3play
Posts: 236
Registered: ‎01-21-2010

Re: Local Disk

[ Edited ]

Hello!

 

# Open Norton support website http://www.symantec.com/norton/support/index.jsp

# Click on Virus and supyware Removal 

# Download the free Norton Power Eraser tool (NPE) and save it to your Desktop

# Start the program and perform a System scan in Normal mode.

# When the scan is complete, be sure that everything is checked (be cautios) , and follow the instructions to remove what it finds.

Be cautions because NPE might finds a false positve , too.

 

 

Download Malwarebytes' Anti-Malware to your desktop

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad and if required the program will ask you to reboot to remove locked files.

 

Download DDS and save it to your desktop

http://download.bleepingcomputer.com/sUBs/dds.scr
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs
DDS.txt
Attach.txt

Save both reports to your desktop.

 

1. Let us know exactly what Norton Power eraser has found

2. Let us know what MBAM has found (attach its log file)

3. Attach the DDS.txt and Attach.txt files in your next reply here

floplot
Posts: 9,952
Topics: 200
Kudos: 1,892
Solutions: 354
Registered: ‎04-11-2009

Re: Local Disk

Hello ablackcloak9


# When the scan is complete, be sure that everything is checked (be cautios) , and follow the instructions to remove what it finds.

Be cautions because NPE might finds a false positve , too


 I would strongly suggest before you let the Norton Power Eraser remove what it finds, that you please post a screen shot of what it has found and await further instructions.. Here are instructions on how to post a screen shot.

 

http://community.norton.com/t5/Forum-Feedback/Forum-Tip-How-to-post-screenshots-in-the-forum/m-p/254...

 

Success always occurs in private and failure in full view.




Super Spyware Scolder
3play
Posts: 236
Registered: ‎01-21-2010

Re: Local Disk


 I would strongly suggest before you let the Norton Power Eraser remove what it finds, that you please post a screen shot of what it has found and await further instructions.. Here are instructions on how to post a screen shot.

 

http://community.norton.com/t5/Forum-Feedback/Forum-Tip-How-to-post-screenshots-in-the-forum/m-p/254...

 


 

More or less the same would apply for MBAM . It may also produce a false positive . I have seen 2 in the past month.

Contributor
ablackcloak9
Posts: 25
Registered: ‎06-07-2010

Re: Local Disk

could you explain what a false positive means because I have no idea what that means. The NPE didn't find anything, but the malwarebytes found a Registry Key infected with Adware.BHO.FL.

floplot
Posts: 9,952
Topics: 200
Kudos: 1,892
Solutions: 354
Registered: ‎04-11-2009

Re: Local Disk

Hello ablackcloak9

 

Here is a writeup by Malwarebytes about Adware. BHO.FL

 

http://www.malwarebytes.org/malwarenet.php?name=Adware.BHO.FL

 

Would you please post the log from malwarebytes after you have saved it in notebook.? You can then add it with Add Attachments  Thanks.

 

Please see this link for a definition of what a false positive is.

 

http://service1.symantec.com/sarc/sarc.nsf/info/html/what.false.positive.html

 

I hope that this answers your questions.

Success always occurs in private and failure in full view.




Super Spyware Scolder
3play
Posts: 236
Registered: ‎01-21-2010

Re: Local Disk


ablackcloak9 wrote:

could you explain what a false positive means because I have no idea what that means. The NPE didn't find anything, but the malwarebytes found a Registry Key infected with Adware.BHO.FL.


It would be great if you follow the instructions strictly and post the necessary logs . This includes DDS , too.

 

Thank you!

Contributor
ablackcloak9
Posts: 25
Registered: ‎06-07-2010

Re: Local Disk

7005i4A1438D2C4A09D0F

floplot
Posts: 9,952
Topics: 200
Kudos: 1,892
Solutions: 354
Registered: ‎04-11-2009

Re: Local Disk

Hello

 


Would you please post the log from malwarebytes after you have saved it in notebook

 


 I just saw my error I made in my previous post. I should have said notepad instead of notebook. Sorry about that..

Success always occurs in private and failure in full view.




Contributor
ablackcloak9
Posts: 25
Registered: ‎06-07-2010

Re: Local Disk

I actually solved I believe that it was something to do with how I downloaded microsoft office 2010 to my computer because now it is gone, but thanks for the help.