TechSpot

Computer is infected with something, constant bsod's, data execution preventions, etc

By Jandizz
Dec 21, 2007
Topic Status:
Not open for further replies.
  1. Did all the preliminary stuff.

    Here are my logs.
     
  2. Jandizz

    Jandizz TS Rookie Topic Starter Posts: 43

    So, uhh, anyone want to help me?
     
  3. momok

    momok TS Rookie Posts: 2,272

    Hi,

    Sorry for the long delay. Our helpers are busy, and sometimes we may miss a thread.

    You may wish to copy and paste these instructions on notepad for easier reference later.

    1. Boot into safe mode under your normal user name. See how HERE
    2. Next turn on "Show all files and folders, including hidden and system". See how HERE

    3. Go to start > run and type services.msc. Press the enter key.
      Search for the following services. Double click to select stop if they are running. Set the startup type to disabled. Click apply/ok for each service you disable.

      Viewpoint Manager Service

    4. Go to start > Control Panel > Add and Remove Programs.
      Remove anything related to the following:

      Viewpoint Manager

    5. After that, run HijackThis and fix the following entries, if found (do this by placing a tick in the check boxes beside these entries and clicking "Fix checked"):

      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

      Close HJT.
    6. Open notepad and copy/paste the text in the quote box below into it (all except the word QUOTE):

    7. Save this as CFScript on the desktop.
    8. Referring to the image below, drag CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe.
      [​IMG]
    9. ComboFix will begin to execute, just follow the prompts. After reboot (in case it asks to reboot), it shall produce a log for you. Post that log (Combofix.txt) in your next reply.

      Note: Do not mouseclick combofix's window while it is running. That may cause your system to hang

    10. Reboot into normal mode and rehide your protected OS files.

    Thereafter, please post a fresh HJT log and the resultant ComboFix log from the above instructions as attachments into this thread.


    Regards,
    momok =)

    This thread is for the use of Jandizz only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.