Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I feel that my computer is infected with a virus


  • Please log in to reply
2 replies to this topic

#1 Narendra Kumar

Narendra Kumar

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:54 AM

Posted 24 October 2008 - 01:16 AM

Hi,

Last week I started seeing a new icon in my tast bar.
It was very similar to "Windows Security Alerts" icon and it asked me to download something.
Without second thought I downloaded and installed whatever it told.
After that the computer has become very slow.

I have Symantic AntiVirus running and also a firewall is installed.
Inspite of this, the above mentioned mishap happened.
Now Symantic keeps telling that it caught a computer.

I used AdAware and CCleaner to scan my computer and clean it.
Both these showed some infections and cleaned them.
But, still the computer is very slow and when I use the above programs, I see that the same registry entries have reappeared.

So, while researching about this on net, I found that HijackThis and Combofix have solutions for this type of problems.
Now I installed both these and have generated logs.

It would be helpful, if somebody with this knowledge analyze the logs and give me some suggestions to remove this nasty virus.

Thanks,
Narendra

BC AdBot (Login to Remove)

 


m

#2 Maniac

Maniac

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria, EU
  • Local time:06:24 AM

Posted 24 October 2008 - 06:35 AM

Hi!

Do not worry! These viruses / threats are not the most dangerous, but very annoying. I will try to help. Do the following:

Download ESET SysInspector
http://www.eset.com/download/sysinspector.php

- Start program through the SysInspector.exe
The program will collect information about the situation on your machine.
- When "inspector" is ready and log file - generated, select File> Save Log
- Confirm their wish

Choose to save the file somewhere and then upload on http://4storing.com/ (when you open the page, click on the Great Britain flag to open the page in English), then give me the link.


Posted Image

#3 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:03:24 AM

Posted 24 October 2008 - 09:44 AM

ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer.



I found that HijackThis and Combofix have solutions for this type of problems.
Now I installed both these and have generated logs.


One assumes you actually ran the comboFix tool and so far the computer is still operational?

please do NOT post it nor run it again unless you are instructed to do so by a Trained Malaware Expert please do NOT post the HJT log here as that will cause this thread to be locked per forum rules

try this scan instead
Please download Malwarebytes Anti-Malware and save it to your Desktop.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report for examination and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately.


Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.



also; how many firewalls DO you have installed?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users