Operating Memory virus help

[jeffrey159 0]

today i just custom scanned my computer and found out there's virus in my boot sector? how do i go around cleaning them off my computer??

C: Local

D: internal HDD

G: External HDD

 

i tried doing a deep scan with malwarebytes but it doesn't detect anything.

tried Emsisot Emergency kit and did and deep scan and found only registery errors.

Edited September 14, 2013 by jeffrey159

[Arakasi 549]

ESET should clean it for you.

With a custom scan , look at your options Jeffrey, see pic below.

 

[Marcos 4,919]

Please post a complete scan log, not only brief information / statistics about scans. If there are too many records, post only the malware-related ones.

[jeffrey159 0]

Please post a complete scan log, not only brief information / statistics about scans. If there are too many records, post only the malware-related ones.

the whole scan log is all blue(Password proctected)

but i saw this

 

C:\Boot\BCD - error opening [4]

C:\Boot\BCD.LOG - error opening [4] << 4 infected things inside but error opening

 

C:\Users\jeffrey\AppData\Local\Temp\61D0.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application

C:\Users\jeffrey\AppData\Local\Temp\B56D.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application

C:\Users\jeffrey\AppData\Local\Temp\C5FE.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application

C:\Users\jeffrey\AppData\Local\Temp\uttEA7F.tmp.exe » NSIS » SDSPlugin.dll - probably a variant of Win32/Toolbar.Widgi potentially unwanted application

C:\Users\jeffrey\AppData\Local\Temp\uttEA7F.tmp.exe » NSIS » SearchProtection.exe - a variant of Win32/Toolbar.Widgi potentially unwanted application

ESET should clean it for you.

With a custom scan , look at your options Jeffrey, see pic below.

it is unticked which means it should clean for me but it didn't

Edited September 15, 2013 by jeffrey159

[stackz 109]

There are only 4 files detected as Potentially Unwanted Applications, no sign of any MBR infection.

C:\Users\jeffrey\AppData\Local\Temp\61D0.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application
C:\Users\jeffrey\AppData\Local\Temp\B56D.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application
C:\Users\jeffrey\AppData\Local\Temp\C5FE.tmp » NSIS » Script.nsi - Win32/DownloadAdmin.G potentially unwanted application
C:\Users\jeffrey\AppData\Local\Temp\uttEA7F.tmp.exe » NSIS » SDSPlugin.dll - probably a variant of Win32/Toolbar.Widgi potentially unwanted application

 

Just navigate to: C:\Users\jeffrey\AppData\Local\Temp

Right click on the Temp folder and in the context menu for ESET go to Advanced options ->Scan and clean

Once cleaned, run an in-depth scan. 

Edited September 15, 2013 by stackz

[Marcos 4,919]

Indeed, there's no mention of a threat detected in memory. Detection of potentially unwanted applications is optional as they don't pose a threat.