This a virus?

By Storm123
Feb 9, 2009
  1. Ok i turned on my computer and i noticed that a login screen poped up which has never happened b4 so i hit enter and it logs me in. All the screens and menus all look like classic windows. i go to the firewall and try and open that and a message pops up saying that i can't open it. i then try and open up a song and another message pops up saying that the sound device is not working. My wireless router says that its connected to the internet but at 72mbs and i cant get onto any websites. if anyone knows how to fix this plz help!!
  2. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

  3. Storm123

    Storm123 TS Rookie Topic Starter

    I did them tests and here's the information.
  4. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    -> No action taken on MBAM scan, for found issues
    Please re-run Malwarebytes
    Confirm updated (third tab)
    Then do the above quoted message, but this time "Remove all found issues"

    By the way, you will need to then restart, and run (and attach) a new HJT log
    Plus the SuperAntiSpyware log too
  5. Storm123

    Storm123 TS Rookie Topic Starter

    ok when i start the scan with SuperAntiSpyware it goes good till about 1 min into it and then the computer restarts and does the same thing when i try and scan it again. but heres the logs for Malwarebytes and HJT
  6. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Wow, it's literally a mess :(
    Note: Your computer system is presently extremely infected. You may want to backup, and then re-install Windows clean (ie remove the partition through Windows setup) Otherwise if you want to continue, I have posted the cleaning instructions below

    Firstly lets get rid of one of your Antiviruses!

    Uninstall Symantec (Norton) Antivirus
    Run the Norton Removal tool

    Download Combofix
    Lots of info on its use h e r e
    Direct download h e r e

    Save it to a location that you can easily find later (in Safe Mode) ie directly to C drive

    Restart your computer to Safe Mode (by repeatedly pressing F8 on your keyboard before Windows starts)
    Log into your Administrator account
    Locate the previously downloaded Combofix
    Double click on it to run, answering any prompts along the way
    Note: during Combofix scan (lasting up to 10mins) your Desktop and clock may reset (all normal)

    Once Combofix has finished, save the log file to be attached to a new reply
    Restart back to Normal mode, and attach the Combofix log

    Start up Malwarebytes again; Update it; then run a full scan (remove all found Malwares)
    You need to run this multiple times, until all hidden Malwares are uncovered and removed

    Finally save and attach the clean Malwarebytes log
    Before actually replying though, you will need to run HijackThis scan only, on every entry that ends with "file missing" place a tick in the associated box, and then select Fix on them
    Restart, and then run a HiJackThis scan and log, and then attach the log to a new reply

    3 attachments required
    Note: There will likely be further removal scans, including possibly changing your Antivirus to Avira, and running a full scan
  7. Storm123

    Storm123 TS Rookie Topic Starter

    ok did that heres the info
  8. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Your Malwarebytes scan (taken 2 hrs to do :( ) Is out of date, you needed to update this first (as stated)
    You really should update it (there's an update button in the program)
    And then run, at least a quick scan

    The Combofix log states that many of your Windows Security updates (previously downloaded) were possibly infected (that's a worry)
    Please run this tool and remove all temp files (including old security updates)

    Your HijackThis log, is incomplete. Something went wrong with the scan :confused:
    After doing the above. Then restart. Then attach another HJT scan log

    Certainly it was infected, but it's on the mend :)
    You really should have updated to SP3 long ago
  9. Storm123

    Storm123 TS Rookie Topic Starter

    i would update but for some reason my wireless internet isn't working on the computer i'm trying to fix >.<
  10. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Download WinsockFix
    Then restart
    You may need to run the wireless Internet Setup program again
    This line put into Start-->Run can start the wireless wizard in Windows:

    %SystemRoot%\system32\rundll32.exe shell32.dll,Control_RunDLL NetSetup.cpl,@0,WNSW
  11. Storm123

    Storm123 TS Rookie Topic Starter

    i'm just putting some files on my backup then putting new windows on it
  12. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Done :grinthumb
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...