Can't Remove Virus

I have 2 threats on my computer that BitDefender says no action is possible.

Gen:Trojan.Heur.VB.pm1@d8wL1Rbi Disinfect failed (object was not found)

BehavesLike:Win32.Malware (object was not found)

What should I do about these issues? My scan has activated 4 times today so far, and the scan results have been the same for over a week now.

Thanks in advance.

Find more posts tagged with

Comments

Cristi Raducu

Hello lboysen,

Please post the entire scan log.

lboysen

Sorry about that....here you go.

BitDefender Log File

Product: BitDefender Total Security 2010

Version: BitDefender Antivirus Scanner

Scanning task: System Scan

Log date: 01/02/2010 2:13:51 PM

Log path: C:\Users\LeeAnn\AppData\Roaming\BitDefender\Desktop\Profiles\Logs\full_scan\1265058831_1_02.xml

Scan paths:

Path 0000: C:\

Scan Level:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: No

Scan for keyloggers: Yes

Virus Scanning Options:

Scan registry keys: Yes

Scan cookies: Yes

Scan boot sectors: Yes

Scan memory processes: Yes

Scan archives: No

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: None

Default first action for suspect objects : None

Default second action for suspicious objects: None

Default action for hidden objects: None

Default first action for encrypted infected objects: Disinfect

Default second action for encrypted infected objects: None

Default first action for encrypted suspicious objects: None

Default second action for encrypted suspicious objects: None

Default action for password-protected objects: Log only

Scan Engines Summary

Virus signatures: 4967462

Archive plugins: 44

E-mail plugins: 6

Scan plugins: 13

System plugins: 5

Unpack plugins: 8

Basic

Scanned items: 54260

Infected items: 1

Suspect items: 1

Hidden items: 0 (the scan options do not include scanning for rootkits)

Resolved items: 0 (infected or suspect items have been found and were ignored or could not be fixed)

Unresolved items: 2

Advanced

Scan time: 00:33:13

Files per second: 27

Skipped items: 125751

Password-protected items: 0

Over-compressed items: 0

Individual viruses found: 2

Scanned folders: 26566

Scanned boot sectors: 4

Scanned archives: 458

Input-output errors: 58

Scanned processes: 71

Infected processes: 1

Scanned registry keys: 1424

Infected registry keys: 0

Scanned cookies: 44

Infected cookies: 0

Remaining issues:Object Path Threat Name Final Status

<System>=>C:\Users\LeeAnn\AppData\Roaming\lsass.exe *32 [1980] (memory dump) Gen:Trojan.Heur.VB.pm1@d8wL1Rbi Disinfect failed (object was not found)

<System>=>C:\Users\LeeAnn\AppData\Roaming\lsass.exe *32 [1980] (full dump) BehavesLike:Win32.Malware (object was not found)

Cristi Raducu

To remove the infection,please run the following program called GMER (download EXE button):

http://www.gmer.net/#files

Press the >>> tab and go under the Files tab where you need to search and delete:

C:\Users\LeeAnn\AppData\Roaming\lsass.exe

Reboot the computer and run a BitDefender deep scan to see if the procedure worked.

Looking forward to your reply.

lboysen

To remove the infection,please run the following program called GMER (download EXE button):

http://www.gmer.net/#files

Press the >>> tab and go under the Files tab where you need to search and delete:

C:\Users\LeeAnn\AppData\Roaming\lsass.exe

Reboot the computer and run a BitDefender deep scan to see if the procedure worked.

Looking forward to your reply.

I tried this and this is the popup I got:

An error 0x00000006 occured during the deletion of file: "C:\Users\LeeAnn\AppData\Roaming\lsass.exe": The handle is invalid.

I'm computer illiterate and have no idea what that means......

Cristi Raducu

Follow the same procedure to remove the file but in safe mode.

[How to restart in SAFE MODE]

- Restart the computer;

- Press the 'F8' key several times before Microsoft Windows begins to load; you need to press 'F8' until you will be displayed a text menu;

- Select 'SAFE MODE WITH NETWORKING' in the text menu and press 'Enter'.

- Wait while Windows loads in Safe Mode; this process ends with a confirmation message; click 'OK' to acknowledge.

lboysen

Thank you for the suggestion.

I tried and got the same error message. Any other ideas?

Thank you in advance.

Cristi Raducu

Using GMER please make a copy of C:\Users\LeeAnn\AppData\Roaming\lsass.exe and save it to a location of your choice.

Upload the file to www.sendspace.com

The website will generate you a download link and send me the link by PM along with the following reports:

http://www.bitdefender.com/KB490-en--The-s...s-infected.html

Thank you.

ravipanai

hi,

i have also watching this error from past 4 days, since im using bit-defender total security 2009, so I thought to have a better knowledge with someone from company, though then i came across this same issue, all logs mentioned here are as per my system & exactly same.

i went with GMER but after downloading, as soon as i run, system restarts.

please advice hw to fight against this error, as today this virus has automatically opened more than 100 internet explorer windows.

waiting for a positive reply

thanks & kind regards

ravi

Cristi Raducu

@ravipanai

Restart the PC in safe mode to run the GMER scan.

http://www.bitdefender.com/KB510