Possible virus attack

[swker98]

Hi guys

this is my problem

my aunt has a computer that her son resently got a virus via email

the virus apperntly put files in the
content.ie5

and a new account named " new"

this foler has over like 5gb ( i stoped waitibg for it to count)

so it makes scans impossable

the folder has over 300,000 files in it and they keep multiplying

will post an HJT log form safe mode when i find my usb stick

im trying to run all the scans

edwardo
avg
adaware but they take 3 housrs or more

is this a common known virus
avg is running right now

 

[swker98]

heres the hjt log

prety dirty and messy

any suggestions guys

i also cannot right click or the comp will hang for 10 minutes and the content.ie5 foler contains 10gb and it cannot be delted because it is being used by another programe

and it is strange thing is that that foler is in
C:\Documents and Settings\owner\Local Settings\Temporary Internet Files\
but therer is no acouunt named owner only one accot

 

[howard_hopkinso]

You`re running Symantec/Norton and AVG. This is not recommended. Get rid of Symantec Norton.

Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/CursorManiaFWBInitialSetu p1.0.0.15.cab

Click on the fix checked button.

Close HJT.

Rename the HijackThis.exe file to HijackThis1991.exe and post a fresh HJT log.

Regards Howard

This thread is for the use of swker98 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[swker98]

nortons gone now

and so is most of the freezing and internet is accassable again

tihs if after i deleted 9gb of files form that foler
C:\Documents and Settings\owner\Local Settings\Temporary Internet Files\content.ie5

but some wont leave bevuaae there "in use"

renamed and shortcut placed on the desktop

log attached

also the look2me distroer wont open as a prosses when checked

thanks a million

 

[howard_hopkinso]

Your HJT log is clean.

Boot into safe mode under your user name. Try and delete the files in C:\Documents and Settings\owner\Local Settings\Temporary Internet Files\content.ie5

Do this for all users.

Reboot into normal mode.

Download and run The Ccleaner programme from HERE.

Run the programme several times with no browser windows open.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of swker98 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.