Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win 7 Home Security- The Aftermath


  • This topic is locked This topic is locked
9 replies to this topic

#1 hairylugs82

hairylugs82

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:08:28 PM

Posted 12 January 2012 - 05:54 PM

Yesterday, I got the Win 7 Home Security virus. It has been removed, but it did a lot of damage to my computer. My Programs menu is empty of links, my external hard drive is apparently empty (but still shows 190 GB used) and I still can't use internet search engines. Doing a resource check, I found that I have a program called PING.EXE running and taking up tons of memory.

Any assistance would be greatly appreciated.

BC AdBot (Login to Remove)

 


#2 Jardon Tech Training

Jardon Tech Training

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:01:28 PM

Posted 12 January 2012 - 06:15 PM

Before doing anything have you checked to see if there is a restore point before you got the virus? This can save a lot of hassle

#3 hairylugs82

hairylugs82
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:08:28 PM

Posted 12 January 2012 - 06:21 PM

No restore points, unfortunately. As far as I can tell, all pertinent information is still there, but windows settings have been changed so I can't access it. (not to mention PING.EXE, which I'm pretty sure is a rootkit.

#4 BushPilot

BushPilot

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:28 PM

Posted 12 January 2012 - 07:41 PM

Have you tried "open file location" by right clicking on the process in the task manager. If you can do that, deleting the file or files will solve the ping.exe issue.

You may also have driver dependency issues now which will not be so easy to fix. Un-hiding your data should not be that difficult using the program hosted on this site.

Edited by hamluis, 16 January 2012 - 03:38 PM.
Edited, PM sent.


#5 hairylugs82

hairylugs82
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:08:28 PM

Posted 12 January 2012 - 08:17 PM

I've already done the step by step there. The initial virus is gone, deleted along with ~170 others which piggybacked their way in while my computer was vulnerable. I'm just wondering how to effectively get rid of PING.EXE and restore Windows 7 to normal. And retrieve the file names for my hard drive. I've seen other people's fixes for similar problems, and it seems much more system specific.

PING.EXE does not have an available file location to open, as it can't be found in task manager. I'm finding it in the Windows 7 Resource Monitor.

#6 Lov3ly :)

Lov3ly :)

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:28 PM

Posted 12 January 2012 - 09:07 PM

I just had this problem.

I could not open anything (System Restore, Firefox, etc) that would help me, so, I right clicked, and chose "Run As Administrator".
It allowed me time to download MalwareBytes, which removed the Win Home 7 2012 virus (it changes its name...its kinda creepy.)

#7 Lov3ly :)

Lov3ly :)

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:28 PM

Posted 12 January 2012 - 09:09 PM

My apologies, I just re-read the initial post and it seems you have already removed it?
How did you go about removing it?

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:10:28 PM

Posted 12 January 2012 - 11:41 PM

PING.EXE is a system file but excessive cpu usage by ping.exe is a symptom of zero access rootkit.This topic needs to be moved to malware forum

Edited by narenxp, 12 January 2012 - 11:41 PM.


#9 LucheLibre

LucheLibre

  • Members
  • 608 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Tennessee
  • Local time:11:28 PM

Posted 12 January 2012 - 11:53 PM

Considering what you've posted, I suggest creating a new thread on the Virus, Trojan, Spyware, and Malware Removal Logs board.

Very Important! Carefully read through and follow these instructions before posting.

If it looks like I know what I'm doing, there's a pretty good chance the only reason for that is because
I once asked someone to run chkdsk /r and a BC Advisor smacked me in the back of the head.

~ LL ~


#10 Pandy

Pandy

    Bleepin'


  • Members
  • 9,559 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:28 PM

Posted 13 January 2012 - 09:41 AM

hairlylugs82, yes the PING.EXE is definitely a sign of something nefarious happening. LucheLibre's directions are the proper way to go about getting some further help with your malware issue. Please post a a link to this topic here when you post in the Malware removal logs forum according to the above directions. Meanwhile I will close this topic. If you do need it reopened please feel free to send me or any other moderator a pm with a link to your topic.

Do not anticipate trouble, or worry about what may never happen. Keep in the sunlight.

Hide not your talents. They for use were made. What's a sundial in the shade?

~ Benjamin Franklin

I am a Bleeping Computer fan! Are you?

Facebook

Follow us on Twitter





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users