Antivirus pop up message-W32/Dzan.a attack

[LonnyRJones]

I would like you and your colleague to post drweb reports, to your own threads of cource.

* Download Dr.Web CureIt to the desktop:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

• Doubleclick the drweb-cureit.exe file and Allow to run the express scan
• This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
• Once the short scan has finished, mark the drives that you want to scan.
• Select all drives. A red dot shows which drives have been chosen.
• Click the green arrow at the right, and the scan will start.
• Click 'Yes to all' if it asks if you want to cure/move the file.
• When the scan has finished, look if you can click next icon next to the files found:
• If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:
  
  This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
• After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
• Save the report to your desktop. The report will be called DrWeb.csv
• Close Dr.Web Cureit.
• Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
• After reboot, post the contents of the log from Dr.Web you saved previously in your next reply.

[tena_79]

Sorry for the late reply because I never thought that there was a page 2 of this thread, silly me

Okay I have done the Dr.Web CureIt scan and it found no virus in my pc. So it didn't produce any report. So does that mean my pc is free of any threats?

As for my colleague, he's still in progress of killing trojan downloaders and virus in his pc using the combofix suggested by your analyst :)

[LonnyRJones]

Thats good to hear.
Your good to go.

[tena_79]

Thank you very much for your help :)