Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

infected , not sure ?


  • Please log in to reply
5 replies to this topic

#1 firsttaff

firsttaff

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:10:22 PM

Posted 12 February 2012 - 11:19 AM

hello
I am haveing a problem with my Pc in which after a certain amount of time I am unable to open any extra windows in internet explorer and after a certain time again Internet explorer wont go from the page i am on , i am also unable to open any programes or folders , i have tried running ad aware , spybot , malwarebytes and AGV But no use , all i can do is restart .
I am running the pc on a network with one other PC (which is on windows 7 pro and not on all the time) useing a cable conection from the router .
I am useing windows xp sp3
any help gratefully appriciated
thank you in advance

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,569 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:22 PM

Posted 12 February 2012 - 01:20 PM

Hello let try this

Please click Start > Run, type inetcpl.cpl in the runbox and press enter.
Click the Connections tab and click the LAN settings option.
Verify if "Use a proxy..." is checked, if so, UNcheck it and click OK/OK to exit.


This infection changes settings on your computer so that when you launch an executable, a file ending with .exe, it will instead launch the infection rather than the desired program. To fix this we must first download a Registry file that will fix these changes. From a clean computer, please download the following file and save it to a removable media such as a CD/DVD, external Drive, or USB flash drive.

FixNCR.reg

insert the removable device into the infected computer and open the folder the drive letter associated with it. You should now see the FixNCR.reg file that you had downloaded onto it. Double-click on the FixNCR.reg file to fix the Registry on your infected computer.


Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal/regular mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 firsttaff

firsttaff
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:10:22 PM

Posted 13 February 2012 - 04:46 PM

hi
thank you for your responce , i have done as instructed and here is the log from the malwarebytes , unfortunatly there is no change
thank you again
regards
Bryan


Malwarebytes Anti-Malware (Trial) 1.60.1.1000
www.malwarebytes.org

Database version: v2012.02.13.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Bryan :: BRYANWORK [administrator]

Protection: Enabled

13/02/2012 20:59:27
mbam-log-2012-02-13 (20-59-27).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 197467
Time elapsed: 13 minute(s), 58 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,569 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:22 PM

Posted 13 February 2012 - 07:48 PM

OK, lets do 2 things.
Reset IE and run SFC.
See To reset Internet Explorer automatically
How to reset Internet Explorer settings



SFC
Please run SFC (System File Checker)
Please run System File Checker sfc /scannow... For more information on this tool see How To Use Sfc.exe To Repair System Files

NOTE for Vista/WIN 7 users..The command needs to be run from an Elevated Command Prompt.Click Start, type cmd into the Start/Search box,
right-click cmd.exe in the list above and select 'Run as Administrator'


You will need your operating system CD handy.

Open Windows Task Manager....by pressing CTRL+SHIFT+ESC

Then click File.. then New Task(Run)

In the box that opens type sfc /scannow ......There is a space between c and /

Click OK
Let it run and insert the CD when asked
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 firsttaff

firsttaff
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:10:22 PM

Posted 14 February 2012 - 09:07 AM

hi
have done that , still the same , althought the pc now frezzes after a certain amount of time as well ??!!
hope you have more suggestions please
thank you
Bryan

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,569 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:22 PM

Posted 14 February 2012 - 02:31 PM

I feel there is a protected malware,so we need a deeper look. Please go here....Preparation Guide ,do steps 6-9.

Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If GMER won't run skip it and move on.

Let me know if that went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users