TechSpot

Possible virus attack

By swker98
Sep 9, 2006
  1. Hi guys

    this is my problem

    my aunt has a computer that her son resently got a virus via email

    the virus apperntly put files in the
    content.ie5

    and a new account named " new"

    this foler has over like 5gb ( i stoped waitibg for it to count)

    so it makes scans impossable

    the folder has over 300,000 files in it and they keep multiplying

    will post an HJT log form safe mode when i find my usb stick

    im trying to run all the scans

    edwardo
    avg
    adaware but they take 3 housrs or more

    is this a common known virus
    avg is running right now
     
  2. swker98

    swker98 TechSpot Paladin Topic Starter Posts: 1,077

    heres the hjt log

    prety dirty and messy

    any suggestions guys

    i also cannot right click or the comp will hang for 10 minutes and the content.ie5 foler contains 10gb and it cannot be delted because it is being used by another programe

    and it is strange thing is that that foler is in
    C:\Documents and Settings\owner\Local Settings\Temporary Internet Files\
    but therer is no acouunt named owner only one accot
     
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You`re running Symantec/Norton and AVG. This is not recommended. Get rid of Symantec Norton.

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/CursorManiaFWBInitialSetu p1.0.0.15.cab

    Click on the fix checked button.

    Close HJT.

    Rename the HijackThis.exe file to HijackThis1991.exe and post a fresh HJT log.

    Regards Howard :)

    This thread is for the use of swker98 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  4. swker98

    swker98 TechSpot Paladin Topic Starter Posts: 1,077

    nortons gone now

    and so is most of the freezing and internet is accassable again

    tihs if after i deleted 9gb of files form that foler
    C:\Documents and Settings\owner\Local Settings\Temporary Internet Files\content.ie5

    but some wont leave bevuaae there "in use"

    renamed and shortcut placed on the desktop

    log attached

    also the look2me distroer wont open as a prosses when checked

    thanks a million
     
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Your HJT log is clean.

    Boot into safe mode under your user name. Try and delete the files in C:\Documents and Settings\owner\Local Settings\Temporary Internet Files\content.ie5

    Do this for all users.

    Reboot into normal mode.

    Download and run The Ccleaner programme from HERE.

    Run the programme several times with no browser windows open.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of swker98 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...