I got an email from a friend with a PDF attachment. The email was headed report no. 035348 and the attachment was entitled 035348.pdf. I opened it, it did not open and said error 14. I contacted my friend and they said that they did not send anything. I assume that it was something trying to put something into my computer, but my AVG 2012 free has not picked up anything. Am I being paranoid?

Hello MalcolmEnglish,

Error code 14 indicates that the PDF file is corrupt and cannot be read.
To verify that the file is not infected, please provide us with it for analysis as described in How To Handle Infection Suspicion.

If the PDF file is really corrupt it will most likely not be possible to analyze it properly.

Thank you

---

AVG Team
How-To articles | FAQ | Free Support
We Protect Us

Computer not working? Laptop slowing down?
Let our AVG TechBuddy expert remotely fix it for you.
Find out more (US & Canada)

Virus..

It was a virus. When I tried to detach it to send it AVG picked it up and put it to the vault. I hope that this means that it has not left anything in my computer.

Hello MalcolmEnglish,

If you want to be sure that your computer is clean, please provide us with both Gmer scan results, Msinfo output and AVG Anti-Virus scan results for further analysis.

Thank you

---

AVG Team
How-To articles | FAQ | Free Support
We Protect Us

Computer not working? Laptop slowing down?
Let our AVG TechBuddy expert remotely fix it for you.
Find out more (US & Canada)

Scans..

Scans attached

Hello MalcolmEnglish,

Please provide us also with Gmer Anti-Rootkit scan (was not attached in archive) so we can point out the culprit.

Thank you.

---

AVG Team
How-To articles | FAQ | Free Support
We Protect Us

Computer not working? Laptop slowing down?
Let our AVG TechBuddy expert remotely fix it for you.
Find out more (US & Canada)

scan..

Here is the Gmer rootkit scan. I had to use the older version of Gmer, as the first one crashed my computer.

Thanks

Hello MalcolmEnglish,

According to the scan result analysis it seems that your computer is infected by MBR rootkit.

In order to get rid of this kind of infection please restore master boot record in offline mode.

Right after the MBR is restored, please scan your computer with updated AVG Rescue CD to kill all remains of infection.

After all above mentioned procedures are done, please provide us with new Gmer and AVG scan results so we can confirm that your computer is clean.

You may also refer to this post by Gary Bee for more information.

Thank you.

---

AVG Team
How-To articles | FAQ | Free Support
We Protect Us

Computer not working? Laptop slowing down?
Let our AVG TechBuddy expert remotely fix it for you.
Find out more (US & Canada)

Thanks. Tried that. How do I know if it worked?

Hi MalcolmEnglish,

please provide us with fresh GMER scan results to check whether the MBR rootkit is gone or not.

Thank you.

---

AVG Team
How-To articles | FAQ | Free Support
We Protect Us

Computer not working? Laptop slowing down?
Let our AVG TechBuddy expert remotely fix it for you.
Find out more (US & Canada)