Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Apparent virus that I can't remove


  • Please log in to reply
1 reply to this topic

#1 Mac724

Mac724

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:02 PM

Posted 21 March 2009 - 08:32 AM

For some time I've been dealing with an apparent virus. My computer will suddenly crash, and I get a blue screen with a message:

PAGE_FAULT_IN_NONPAGED_AREA

Technical information

**STOP: 0x00000050 (0xFC1A8E8,0x00000000,0x80579F0B,0x00000000)

Along with some other information asking about recently installed hardware (there is none) and contacting my system administrator.

When I reboot my computer, it typically locks up, with the "hourglass" icon displaying continuously. The only way that I have discovered to get around this is to activate Spyware Doctor immediately on the bootup. An "Intelliscan" always find a Trojan agent at the location below:

C:\Documents & Settings\Me\Local Settings\Temporary Internet Files\bestwiner.stt

On "Fix checked", Spyware Doctor indicates that it has been removed. However, another scan run immediately finds the same Trojan.

A full scan finds the same agent, along with two other apparently malware products.

I've seen your Combofix referenced as a possible way of getting rid of this thing. Can you help me?

BC AdBot (Login to Remove)

 


#2 OldGrumpyBastard

OldGrumpyBastard

  • Members
  • 781 posts
  • OFFLINE
  •  
  • Location:"Way South of 'da Bridge"
  • Local time:06:02 PM

Posted 21 March 2009 - 09:08 AM

Follow the links for information about stop errors:

http://support.microsoft.com/kb/329293
http://support.microsoft.com/kb/222635
http://www.aumha.org/a/stop.php
http://msdn.microsoft.com/en-us/library/ms841534.aspx
http://msdn.microsoft.com/en-us/library/ms793437.aspx
http://www.windowsbbs.com/windows-xp/48062...error-50-a.html

If you are concerned about malware (and you should be) open up a new topic in the "Am I Infected" forum, describe your problem, any steps that you have taken and any other unusual things and go from there...

http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/

Please do not install or run Combofix without direct supervision from an expert as using it improperly can lead to disasterous results.
Does this look like an OldGrumpyBastard or what?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users