jeffrey159 0 Posted September 14, 2013 Share Posted September 14, 2013 (edited) today i just custom scanned my computer and found out there's virus in my boot sector? how do i go around cleaning them off my computer?? C: Local D: internal HDD G: External HDD i tried doing a deep scan with malwarebytes but it doesn't detect anything. tried Emsisot Emergency kit and did and deep scan and found only registery errors. Edited September 14, 2013 by jeffrey159 Link to comment Share on other sites More sharing options...
Arakasi 549 Posted September 14, 2013 Share Posted September 14, 2013 ESET should clean it for you. With a custom scan , look at your options Jeffrey, see pic below. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,919 Posted September 14, 2013 Administrators Share Posted September 14, 2013 Please post a complete scan log, not only brief information / statistics about scans. If there are too many records, post only the malware-related ones. Link to comment Share on other sites More sharing options...
jeffrey159 0 Posted September 15, 2013 Author Share Posted September 15, 2013 (edited) Please post a complete scan log, not only brief information / statistics about scans. If there are too many records, post only the malware-related ones. the whole scan log is all blue(Password proctected) but i saw this C:\Boot\BCD - error opening [4] C:\Boot\BCD.LOG - error opening [4] << 4 infected things inside but error opening C:\Users\jeffrey\AppData\Local\Temp\61D0.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application C:\Users\jeffrey\AppData\Local\Temp\B56D.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application C:\Users\jeffrey\AppData\Local\Temp\C5FE.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application C:\Users\jeffrey\AppData\Local\Temp\uttEA7F.tmp.exe » NSIS » SDSPlugin.dll - probably a variant of Win32/Toolbar.Widgi potentially unwanted application C:\Users\jeffrey\AppData\Local\Temp\uttEA7F.tmp.exe » NSIS » SearchProtection.exe - a variant of Win32/Toolbar.Widgi potentially unwanted application ESET should clean it for you. With a custom scan , look at your options Jeffrey, see pic below. it is unticked which means it should clean for me but it didn't Edited September 15, 2013 by jeffrey159 Link to comment Share on other sites More sharing options...
ESET Insiders stackz 109 Posted September 15, 2013 ESET Insiders Share Posted September 15, 2013 (edited) There are only 4 files detected as Potentially Unwanted Applications, no sign of any MBR infection. C:\Users\jeffrey\AppData\Local\Temp\61D0.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted applicationC:\Users\jeffrey\AppData\Local\Temp\B56D.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted applicationC:\Users\jeffrey\AppData\Local\Temp\C5FE.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted applicationC:\Users\jeffrey\AppData\Local\Temp\uttEA7F.tmp.exe » NSIS » SDSPlugin.dll - probably a variant of Win32/Toolbar.Widgi potentially unwanted application Just navigate to: C:\Users\jeffrey\AppData\Local\Temp Right click on the Temp folder and in the context menu for ESET go to Advanced options ->Scan and clean Once cleaned, run an in-depth scan. Edited September 15, 2013 by stackz Link to comment Share on other sites More sharing options...
Administrators Marcos 4,919 Posted September 15, 2013 Administrators Share Posted September 15, 2013 Indeed, there's no mention of a threat detected in memory. Detection of potentially unwanted applications is optional as they don't pose a threat. Link to comment Share on other sites More sharing options...
Recommended Posts