Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Explorer.Exe infection


  • This topic is locked This topic is locked
3 replies to this topic

#1 Fried_Yoda

Fried_Yoda

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:10 PM

Posted 06 October 2009 - 05:20 PM

This morning I came to my computer to find it on the Welcome screen, strange, as I had a DVD burning overnight. I logged in and I was immediately flooded by Windows Police Pro popups. I immediately restarted to safe mode and updated and ran malawarebytes. It removed the infection, but I ran SpyBot S&D which found a few other infections and then AVG Free which found another 15. All infections from all programs were removed except for one of the ones found by AVG, which listed it as Explorer.Exe (204) hidden.infection. I keep getting random popups trying to direct me to bogus anti-spyware sites, so I know that my PC isn't clean. I downloaded ComboFix and ran it. Unfortunately every time I run it, it crashes before starting Stage 1 saying that it cannot find "temp 04" and proceeds on restarting my computer. I downloaded DDS and RootRepeal. DDS ran fine and I will post the logs below, but RootRepeal refuses to even open, crashing with a memory error each time. I tried redownloading from a different mirror but the same results happened. Here is the RootRepeal crash report:

ROOTREPEAL CRASH REPORT
-------------------------
Windows Version: Windows XP SP3
Exception Code: 0xc0000094
Exception Address: 0x00409746

I have attached my DDS.txt. Please help, as I am unsure as to what other tools I can use to remove this b*stard!

Attached Files

  • Attached File  DDS.txt   17.51KB   2 downloads


BC AdBot (Login to Remove)

 


#2 Fried_Yoda

Fried_Yoda
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:10 PM

Posted 07 October 2009 - 10:58 AM

any ideas?

#3 Fried_Yoda

Fried_Yoda
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:10 PM

Posted 07 October 2009 - 10:17 PM

Requesting this topic be closed. New circumstances have altered original post's conditions. Will create new post to document new problem.

#4 schrauber

schrauber

    Mr.Mechanic


  • Malware Response Team
  • 24,794 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Munich,Germany
  • Local time:04:10 AM

Posted 23 October 2009 - 03:35 PM

Hi,

Thanks for letting us know, this Topic will now be closed :(.

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :(

If you need this topic reopened, please contact me via pm with the address of the thread.

Everyone else please begin a New Topic.
regards,
schrauber

Posted Image
Posted Image

If I've not posted back within 48 hrs., feel free to send a PM with your topic link. Thank you!

If I have helped you then please consider donating to continue the fight against malware Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users