msb.exe

pnbg · 10-15-2009, 08:55 AM

Similar story to msb.exe

In the last 24 hours, I tried to download a software package to store/use passwords on my PC. At some point in the process, my system became infected.

I have AVG, Zone Alarm, and SpyBot. I routinely use Firefox and IE8.

File located in:

C:\WINDOWS\msb.exe

Tried to use Spybot and AVG but functions blocked. Saw that you used Combofix, but also read warnings that need guidance.

Your help would be greatly appreciated.

pnbg

pnbg · 10-15-2009, 11:54 AM

------
KASPERSKY ONLINE SCANNER 7.0: scan report
Thursday, October 15, 2009
Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Thursday, October 15, 2009 14:27:39
Records in database: 2998195
------
Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan statistics:
Objects scanned: 137177
Threats found: 1
Infected objects found: 0
Suspicious objects found: 2
Scan duration: 02:17:41

File name / Threat / Threats count
J:\1My Files\Backups\Outlook Archives\Friends!! ALL.pst Suspicious: Exploit.HTML.Iframe.FileDownload 1
J:\1My Files\Backups\Outlook Archives\Potential Leads or Partners.pst Suspicious: Exploit.HTML.Iframe.FileDownload 1

**TheBruce1** · 10-15-2009, 01:02 PM

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a

Quote:

Having problems with spyware and pop-ups? First Steps

link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

10-15-2009, 08:55 AM	#1 (permalink)
pnbg Registered User Join Date: Oct 2009 Posts: 2 OS: xp pro	msb.exe Similar story to msb.exe In the last 24 hours, I tried to download a software package to store/use passwords on my PC. At some point in the process, my system became infected. I have AVG, Zone Alarm, and SpyBot. I routinely use Firefox and IE8. File located in: C:\WINDOWS\msb.exe Tried to use Spybot and AVG but functions blocked. Saw that you used Combofix, but also read warnings that need guidance. Your help would be greatly appreciated. pnbg

10-15-2009, 11:54 AM	#2 (permalink)
pnbg Registered User Join Date: Oct 2009 Posts: 2 OS: xp pro	Re: msb.exe ------ KASPERSKY ONLINE SCANNER 7.0: scan report Thursday, October 15, 2009 Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Thursday, October 15, 2009 14:27:39 Records in database: 2998195 ------ Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ G:\ H:\ I:\ J:\ Scan statistics: Objects scanned: 137177 Threats found: 1 Infected objects found: 0 Suspicious objects found: 2 Scan duration: 02:17:41 File name / Threat / Threats count J:\1My Files\Backups\Outlook Archives\Friends!! ALL.pst Suspicious: Exploit.HTML.Iframe.FileDownload 1 J:\1My Files\Backups\Outlook Archives\Potential Leads or Partners.pst Suspicious: Exploit.HTML.Iframe.FileDownload 1