Posted 06 March 2011 - 02:25 PM
I have recently had the "WindowsSafeMode" virus and had successfully removed it; or so I thought. My computer is running normally, except that MalwareBytes' keeps popping up and telling me they are blocking incoming or outgoing ip addresses. They are mostly incoming, but I do get the occasional outgoing attempt. The issue I have is that I am running a fully updated version of MalwareBytes and every time I scan, it can't find any issues.
I am also running Norton 360 5.0 Premium edition and have done full system scans but to no avail.
From what I can tell, I have removed most of the virus, but still have something else left over. The one suspicious thing I found when reviewing my process in task manager is that ctfmon.exe was running so I disabled it through msconfig. When I booted up again I went into the local machine registry and looked for the file to remove it, but it wasn't there. Is this causing the issue? Before I loaded MalwareBytes' I was getting the issue where random music plays for no reason, is that possibly related to ctfmon.exe?
Any and all help is appreciated!