Help With Win32 Darksma O !

[Glassman]

Here is the new combofix log. Blacklight turned up nothing.

GM

[PhilliePhan]

Here is the new combofix log. Blacklight turned up nothing.

Well . . . looks like the VUNDO was just a remnant like the smitfraud. You'll need to manually delete these remnants.

C:\WINDOWS\system32\klnmp.bak2
C:\WINDOWS\system32\klnmp.bak1

For the life of me, I cannot find anything in these logs! I am at a loss.

I'm thinking sfc might be a good idea. Something is definitely borked, but whatever did it (if malware) isn't present any longer.


BTW - What scanner popped up the Darksma reference?

PP

[Glassman]

Sorry for the delay...been pretty busy...

Deleted the VUNDO items. As soon as I do sfc I'll post any changes (hopefully there are some.) I am wondering more and more if this really is a video card issue??

Oh, the Darksma hit was from a scan by my old anti-virus software. That was the trojan that was discovered at the same time the screen became corrupted.

I actually wrote "breed of Darksma"? !

GM

[PhilliePhan]

I actually wrote "breed of Darksma"? !

That's pretty accurate! LOL!

There isn't much info available on that guy. Plus, it doesn't help that all the different AV vendors come up with their own names for the baddies.

All the logs show clean + Blacklight did not produce any rootkit hits. Probably no active malware to worry about.

I just do not have any leads for how to proceed. Hopefully sfc will help (it is often a "shot in the dark")

Here is a good link if you have trouble:

http://www.updatexp.com/scannow-sfc.html

Best
PP