Help - Search - Members - Calendar
Full Version: Can Stop The Startup
BleepingComputer.com > Security > Am I infected? What do I do?
   
amusing
Recently, i had infected by a virus. When i start the window a "sgcxcxxaspf080608" program will activate(virus) in the startup, after that this startup will disappear, after that when i surf the internet, window will automatically open the internet explorer to certain website, the process will randomly occur. So, is there any solution for my problem? Thank you.
superbird
1. Download ATF cleaner (by Atribune)

Doubleclick ATF cleaner to start the program.
At the tab "Main", place a mark at Select All.
Klick the button Empty Selected.

If you use FireFox:
Klick at the tab "Firefox", place a mark at Select All.
I you would keep the stored passwords in FireFox, please choose "No" at the window that opens.
(This deletes the mark at "Firefox saved passwords")
Klick the button Empty Selected.

If you use Opera:
Klick the tab "Opera", place a mark at Select All.
I you would keep the stored passwords in Opera, please choose "No" at the window that opens.
Klick the button Empty Selected.

Ga to the tab "Main" and click the button Exit to close the program.

2. Download the next programs, but do nothing more than that:
3. Install the programs that are advised in step 2, and update them. smile.gif

4. Restart your computer in Safe Mode. See here for a tutorial how to do this.

5. Scan with the next programs:
  • Your anti-virusscanner
  • Spybot S&D
  • Ad-Aware
  • Windows Defender
  • MalwareBytes' Anti-Malware
    Post the results in your next answer

6. Restart your computer again, but now in Normal Mode.

7. Go to Kaspersky Online Scanner.
Klick at the button Accept.
This scanner is only compatible with Internet Explorer 6 and higher !!
It could be you must click at a yellow beam to activate ActiveX files that Kaspersky needs to run and download. Accept this.
  • The program will now start downloading the latest definition files. After this you need to click Next.
  • Than click Scan Settings.
    Beneath the text Scan using the following antivirus database: you need to choose the second option: extended - protect your .....
    Beneath the text Scan options: you need to check the following boxes: Scan Archives .... and Scan Mail Bases ....
  • Than click OK.
  • Now start the scan by clicking the text My Computer.

    Note that this scan may take a while.
  • When the scan is finished, you'll get the option to save the scan report.
    Click at the button Save Report As. Save the report at your Desktop with the name kavscan.txt
Post this report in you next reply.

8. Now, post the logs/results in your next answer. Tell which problems you still have. I need the following reports:
  • The results of your anti-virus program
  • Spybot S&D
  • Ad-Aware
  • Windows Defender
  • Kaspersky Online Scan

Good luck. smile.gif
amusing
Too bad, when i try to use "Autoruns" program to delete the virus, i accidentaly delete some windows registry, now my window cant even open Task Manager, also the antivirus software that i download can not install at all. I think i have no choice but to reformat my window. Anyway, thanks for helping me on this.
superbird
That's not very good to hear.
I think the only thing you can do is reformatting you harddisk. Or do a repair installation, and then remove the infection that's left. smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.