12-10-2012 07:54 AM
System: Windows 7 Home Premium
HP G6 laptop x64 based
Backup job using the standard Win7 utility (backing up users files from C:\ to a USB drive)l started failing yesterday reporting errors whist trying to read from the volume shadow copy.
Looking at the NIS log I discover that my PC appears to be infected with the Trojan.Webkit.html as several entries have started to appear in the “resolved” threats log – detected by Auto Protect. But it can’t be resolved as the entries keep appearing at random intervals. Example from NIS log:
No action required
Device\harddiskvolumeshadowcopy13\users\MY USER ACCOUNT NAME\appdata\local\mozila\firefox\profiles\6fxm5kl
No fix attempted
I ran a full system scan using Malwarebytes and it reported no threats. I then ran a NIS full system scan in Safe Mode and again nothing was reported apart from a couple of tracking cookies.
I’ve not attempted anything further as I’m not competent enough without help.
Can anybody help fix this?
I have a USB stick.
12-10-2012 09:50 AM
Are you scanning the usb drive &/or computer as I'm thinking that the problem is within that particular file on the backup on the usb drive & when the drive is being inserted that the virus is trying to run, if you haven't done so try scanning the usb drive.
12-10-2012 10:01 AM - edited 12-10-2012 10:02 AM
The NIS warning I showed in my first post appeared when the USB drive was NOT connected to the PC, so I don't think the problem lies with the USB. Admittedly the first occurence of the NIS warnings (there have been 4 so far) did appear when the USB drive was connected to the PC and the backup failed with the usual gobbledygook Microsoft error message. So like you I initially susp[ect the USB drive but don't think it is the culprit.
So I'm perplexed
12-11-2012 01:19 AM
It might be worth running a full scan on the usb just to see if anything shows in any case, then running a full scan on the computer again, in both cases I'd suggest that both scans are run with the scan setting under settings>computer scan>scan performance profiles set to 'full scan' rather than standard trust.
12-11-2012 02:56 AM - edited 12-11-2012 02:57 AM
I reran the scans using your suggested settings and no problems were reported.
No further new warning messages have appeared from NIS since yesterday.. Perhaps NIS has fixed the issue?
But I don't like mysteries so don't really trust the laptop 100% at the moment.
12-11-2012 11:20 AM
Hopefully it'll not return.
I know what you mean there's always a little nagging doubt that it could still be there but hidden, I can only say that if after plugging in the usb again you don't see a return of the virus & after a few weeks there's still no sign of it hopefully that'll be the end of your virus troubles.