Like you have never seen this but help

By YoYo888
May 27, 2008
  1. somehow some where I got a virus i'm pretty sure i keep getting this command popup on my desktop even when i dont have a browser open. I have looked in add and remove programs and found this command program listed, and it wasnt there before the worst part is it wont let me remove it. my tray icons are all gone and instead there are little blue blocks taking their place. I'm running extremely slow.
    my os is windows xp pro laptop is a dell inspiron 6400.
    can anyone help me with this? please!
  2. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

  3. serviceme

    serviceme TS Rookie Posts: 21

    If all else fails, reload windows. Easy fix :)
  4. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    is it normal for the trend micro scan to take over 2 hours?
    or is the virus causing this?
  5. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    the more infections it finds the longer it takes.
  6. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    TY for the quick reply I just rechecked progress now it says 5 hours lol
    I'll re- post when i get done with the 15 steps. It will probably be tomorrow.

    I cant seem to get to the hjt.exe file in order to change the name. can someone tell me how to do this? when i go in through program files it only sows me the startup icon for hjt
  7. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Start-->Run--> C:\Program Files\Trend Micro\HijackThis

    This will open the normal install folder of HiJackThis, where you can rename it
  8. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    ty got it will coninue on with the steps

    looks like im full of questions tonight. All of my desktop icons and my taskbar just went away!!! should i panic now or just restart?
  9. serviceme

    serviceme TS Rookie Posts: 21

    Sounds like explorer.exe just stopped running. Try hitting CTRL + ALT + Del and choosing File > New task. Type 'explorer.exe' in the box and see if that fixes. A restart would also work.
  10. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    Step 10 tool 2

    when I went to download the tool # 2 the website says it is unavailable.
    Is there another place to get this?
  11. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    Please attach logs instead of copy and paste

    Tool 2 works just fine for me> you can skip it as tool 3 should pick up the same infections

    Tool 3
    Please download VundoFix.exe to your desktop
    • Double-click VundoFix.exe to run it.
    • Click the Scan for Vundo button.
    • Once it's done scanning, click the Remove Vundo button.
    • You will receive a prompt asking if you want to remove the files, click YES
    • Once you click yes, your desktop will go blank as it starts removing Vundo.
    • When completed, it will prompt that it will reboot your computer, click OK.
    • Please attach C:\vundofix.txt
    Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.
  12. matt1522

    matt1522 TS Rookie Posts: 81

    There are some shady sites in the log you copy and pasted you might want to look in to vmware or other virtual machine if you pick up a virus on that you can just delete the VM.
  13. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    Ok I went back and tried tool 2 again it worked this time no infected files were found
    ran tool 3 as well no infections found there either

    no rootkits were found with panda
  14. zenenpt

    zenenpt TS Rookie

    os problem

    good day. I have a problem with my internet, it keep showing internet problem, and sometimes it hangs. i cant even close the task. what shall i do?
  15. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    Hi zenenpt,

    Welcome to Techspot!

    This thread is for the use of YoYo888 only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

    Please have a read here-> Is your system infected? Read this before Cleaning or Formatting

    If you decide to clean your system please follow these Viruses/Spyware/Malware, preliminary removal instructions and post back in your own thread with the requested logs. There should be at least 3.

    1)MBAM or SAS log
    2)Combofix log
    3)Hijackthis log (Step 15)
  16. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    Ty for all your help.
    let me know if there is anything else I need to do.

    do I need to perform any other tasks after posting my 3 logs?
  17. kimsland

    kimsland Ex-TechSpotter Posts: 14,524


    By the way are you getting anymore popups on your desktop?

    Whilst waiting, for the logs to be checked, you could run CCleaner and then defrafg your computer

    Mind you, if I were you, I'd probably run Malwarebytes to be doubly sure
    If you do this though, you would need to supply a new HJT log once finished

    Download and Run Malwarebytes' Anti-Malware
    Please download Malwarebytes' Anti-Malware to your desktop.
    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to:
      • Update Malwarebytes' Anti-Malware
      • Launch Malwarebytes' Anti-Malware
    • Then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
  18. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    No I am not getting any more pop-ups but I keep getting a notice from McAfee refering to PUP's listed as being associated with my restore files but I was able to Quaranteen them using McAfee, but I have not seen that in 2 days. I am downloading MBAM and will run it and attach a new HJT on my next post.
    Thank You all for your excellent help. If you ever need any info on your vehicle let me know. Thats what I DO know how to fix lol.

    I ran the malwarebytes and attached the log let me know what I should do (what to remove?)
  19. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Um it says "No action taken" on many found trojans
    You did read this part, above, didn't you?
  20. YoYo888

    YoYo888 TS Rookie Topic Starter Posts: 27

    OK everything checked and removed here is another hjt log.
  21. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Actually I'm not perfect at going through these big lists
    But if it was my computer I'd uninstall Spyware Doctor (slows computers down)
    Also SUPERAntiSpyware and Ad-Aware

    Remove these entries: (mainly poker sites)
    Actually reset IE fully:
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...