Malaware/Trojan

KRU Shotgun · 5 Jun 2012 at 13:45

I have 2 malaware alerts & 1 trojan & for the first time in 11 yrs i cant find them to get rid, wondered if u peeps could help me out.

Avast finished scan & saying C:\Windows\assembly\GAC_32\Desktop.ini x2 &
C\:Windows\assembly\GAC_64\Desktop.ini &
showing there all Win32:Sirefef-PL[Rtk] threats

Links to all 3 below

http://i1167.photobucket.com/albums/q633/Shotgun1001/virus.png
http://i1167.photobucket.com/albums/q633/Shotgun1001/Virus2.png
http://i1167.photobucket.com/albums/q633/Shotgun1001/Virus3.png

Thx Shotgun

Mitzy · 5 Jun 2012 at 13:47

Spybot has always helped me, boot into windows in safe mode and run all your AV.

morfmedia · 5 Jun 2012 at 13:57

Likewise I picked up siriyef.y last week, first time in MANY years. I ended up formatting for safety. Microsoft security essentials, malwarebytes, then try a couple of online scanners (panda etc)

KIA · 5 Jun 2012 at 14:14

Boot to safe mode with networking. Download Malwarebytes, update definitions & perform a full system scan.

Diggsy · 5 Jun 2012 at 14:16

Double check they are not FP's by uploading them here first... Virustotal

Then if they are confirmed as viruses, I would run MalwareBytes and maybe even run HijackThis and upload the log file here to check... http://www.hijackthis.de/en

KRU Shotgun · 5 Jun 2012 at 17:22

Run malwarebytes found them & deleted them.
Run avast again & its still picking them up???

Mitzy · 5 Jun 2012 at 18:37

If you're really stuck just backup all your media and wipe the slate screen with a fresh install.

KRU Shotgun · 5 Jun 2012 at 18:47

Mitzy said:
If you're really stuck just backup all your media and wipe the slate screen with a fresh install.

I did a fresh install 6wks ago lol

Philtor · 5 Jun 2012 at 18:49

KRU Shotgun said:
Run malwarebytes found them & deleted them.
Run avast again & its still picking them up???

Try disabling system restore first, then run Malware bytes again from safemode.

Duke · 5 Jun 2012 at 19:08

Run CCleaner to clear the temp files, old system restore points and dodgy looking startup items.

KRU Shotgun · 5 Jun 2012 at 19:37

Just done sys restore & they gone

thx for the help guys

Infam0us · 5 Jun 2012 at 22:03

Had to install NOD32 on a clients laptop that had the dreaded siriyef virus. Nothing else could touch it