Generic.brontok.a69414b4 Removal Problem

This virus creates an exe file of 44kb size in every folder on my computer, the same name as a folder. Bitdefender Internet Security 2012 detects infected files on scan and deletes all infected files, but after reboot virus recreates the same files in every folder again. Please help to remove this virus!

Can not upload file as it do not give me a permision to do this.

Find more posts tagged with

Comments

evaldas84

screenshots

evaldas84

Managed to upload file from SAFE MODE. Here it is

http://www.2shared.com/file/Vf11uN20/Steam_exe_infected.html

Please help!

rootkit

Hello

That file is infected

http://www.virustotal.com/file-scan/report...8764-1321713197

In order to be able to further investigate the reported situation we need a bit more information from your computer as follows:

. A BDSYS log;

[how to GENERATE A BDSYS LOG]

. Save and extract the BDSYS tool to a location of your choice:

http://www.bitdefender.com/files/Knowledge.../BDSysLog_i.exe

. Make sure you close all active applications and then run "BDSysLog_i.exe"; If you receive a firewall

alert,select to Allow the application to connect;

. Click the "Create log" button to start generating the

log; A progress bar is indicating that the tool is creating the report;

. When the small window appears with the message "Log

saved" then the report is complete and a new file named "bdsyslog.zip" has appeared on your Desktop;

. Send me via PM the generated log file.

. If the file is to big for send it over PM, upload the results to one of the online file hosting servers mentioned below or use one of your own and send via PM the download link.

http://www.sendspace.com

http://www.mediafire.com

IMPORTANT:

.During this process the Real Time Protection in Bitdefender must be temporarily disabled;

.If you receive a Bitdefender Firewall alert to inform you that BDSysLog_i.exe tries to connect to the internet,then you need to select Allow;

[how to DISABLE THE ANTIVIRUS PROTECTION in Bitdefender 2012]

In order to disable the antivirus protection,please open Bitdefender and click the "Settings" button in the upper side part of the interface"; In the new window go to "Antivirus" > "Shield"tab and click on "Turn off" under On-access scanning.Select the time interval that suites your troubleshooting needs and click "OK" . The On-access scanning should be enabled back after finishing the troubleshooting procedure.

We will get back to you as soon as the analysis is complete. Have a nice day.

evaldas84

any news?

rootkit

Hi evaldas

The guys from our lab are still analyzing your report. I will get back to you ASAP.

Thank you.

rootkit

Hello

From the log, the system looks clean.

Please run a system scan in Rescue Mode.

http://www.bdantivirus.com/bitdefender/tot...ion.rescue.html

Thank you.