Hi, for the past few days I've had a few problems with my computer. I'm 99% sure I'm infected. I'm in no way an advanced user but I tried to fix this by myself. This computer is falling apart, really, but I just want to get rid of this virus. Sorry if there is irrelevant info. Just wanted to provide as much detail as possible.
Using Windows 7 32-bit.
I was browsing a website and accidentally clicked on an URL, I closed it almost immediately though. I don't remember which URL is it but ever since then my PC has been acting strangely.
I ran Malwarebytes, TDSSKiller (found nothing) and other programs like SuperAntiSpyware. SAS found 591 tracking cookies, and since there were too many suspicious cookies I let SAS do its job and delete them. Spybot and ESET Online Scanner froze on me before the scans finished.
Firefox is working ok and I haven't tested Chrome yet but I don't think it has a problem either.
Malwarebytes found nothing major on my first scan (I had a browser hijacker called MyStartSearch before this started occurring, and I finally removed it yesterday) and I just did a second scan with Malwarebytes now and it found PUP.FastStart again (I deleted it).
There aren't any suspicious processes running (as far as I know).
Around two days ago, my keyboard was having some problems. When I typed "?" for example it would bring up }? instead, and some letters were randomly capitalised sometimes. It's now fixed; could have been a hardware problem.
I used a program I found here in BleepingComputer and it showed me that my HOSTS file has a few URLs related to malware/ad websites.
My Skype also got corrupted but that is probably unrelated. I had a power off problem.
I also got a BSOD: "KERNEL_DATA_INPAGE_ERROR". I think it's unrelated since it hasn't appeared again since I ran chkdsk.
The weirdest thing, however, is that, for example, whenever I search for something on my start menu (even the simplest of programs), a bunch of "folders" come up. They're named: "Programs", "Documents", "Files". When I click on any of them, a message appears, saying that I cannot open the file because of security settings (something like that). I googled the error message and it seems related to Internet Explorer. These "folders" have no metadata or icon and are 0 bytes. Windows tells me they're located in my Desktop but I can't find anything there. This is what bothers me the most because I can't search anything on Start Menu anymore.
No personal files have been deleted as far as I've noticed. My hard disk space has been fluctuating but I think that's normal. (A few megs disappearing and reappearing here and there, probably caused by temporarily files...)
I ran SAS's repair tools to see if I could fix my start menu and nothing happened.
UPDATE: I ran SAS again and it found a weird CLSID. It's called TRAYICON_HANDLER.OCX and the author is Robdogg, Inc. I found nothing on Google about this.
Edited by juneschi, 15 August 2016 - 05:57 AM.