TechSpot

Virus alert in taskbar, hard drives invisible in My Computer

By teaker
Jun 14, 2008
Topic Status:
Not open for further replies.
  1. Hi all.

    I just got rid of the worst part of a nasty malware infection, but don't know how to get rid of the "virus alert!" lingering next to the time.

    I had the "error cleaner" & "virus protector" malware that would caused multiple popups all of the time, disabled ctrl+alt+del, disabled downloading, removed all programs from start menu, etc etc etc.

    Anyways, I think I've taken care of all of that stuff... just cant get rid of the VIRUS ALERT!, and my hard drives aren't showing up under my computer.

    any suggestions? I've attached my hjt log
    Thanks!

    Attached Files:

  2. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    Show hidden files through windows explorer
    • Access Windows Explorer by clicking Start, point to All Programs, Accesories, and then click Windows Explorer. Or hold the windows key and press E
    • On the Tools menu in Windows Explorer, click Folder Options
    • Click the View tab.
    • Under Hidden files and folders, click Show hidden files and folders
    • Remove the checkmark from the checkbox labeled Hide protected operating system files
    • Remove the checkmark from the checkbox labeled Hide file extensions for known file types
    • Put a checkmark in the checkbox labeled Display the contents of system folders.

    ---------------------------------------------------------------------

    Malwarebytes' Anti-Malware

    • Please download Malwarebytes' Anti-Malware to your desktop.
    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to
      • Update Malwarebytes' Anti-Malware
      • and Launch Malwarebytes' Anti-Malware
    • then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. please attach this log with your reply
      • If you accidently close it, the log file is saved here and will be named like this:
      • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

    --------------------------------------------------------------------

    Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {B72A07F4-6C4F-4BC9-8C9A-3405E22A8272} - C:\WINDOWS\system32\hgGxUKeE.dll
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O4 - HKLM\..\RunServices: [sndraw32] C:\WINDOWS\system32\sndraw32.exe

    Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Reboot into safe mode.

    Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

    Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these files (if present):

    C:\WINDOWS\system32\hgGxUKeE.dll
    C:\WINDOWS\system32\sndraw32.exe


    After that, Reboot, and post a new HijackThis log here in a reply

    --------------------------------------------------------------------

    Attach MBAM log with new Hijackthis
  3. klopapier

    klopapier TS Rookie

    Hi teaker

    i had ur problem today too... Mine was Vista Antivirus 2008, with crazy desktop and messages that constanty said my pc was infected. Actually it was some sort of url displayed. Damn Malware Stuff...

    Luckily i got rid of almost everything, Spybot Search&Destroy, TuneUp Utilities, Hijackthis, MsConfig, Regedit and some file-deleting here and there solved it almost entirely.

    You can get rid of that VIRUS ALERT! beside the clock by going to the registry editor.
    Start -> Run... -> type in "regedit" and accept -> in the registry editor go to the EDIT menu ->
    ->Click on Search... -> and search for that exact string "VIRUS ALERT!" until your through the complete registry -> Edit or Delete the entries. You should get 2 hits, one within the windows information and the other one for that time display.

    Though, i'm still troubling with not seeing the hard drives neither on My Computer nor when i open any kind of search window...

    Would appreciate any help on that too...
  4. klopapier

    klopapier TS Rookie

    There you go... i found it...

    Go to the registry editor the same way... but this time look for the entry "NoDrives" and delte it.
    It should be somewhere in a place like this:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

    Good luck
  5. guiltyassyn

    guiltyassyn TS Rookie

    Same Problem, Virus Alert in Taskbar, No hard drives visible

    I am experiencing the same problem. I have removed several viruses using virus removal tools but I still have the virus alert in the toolbar and my hard drives are still invisible. Additionally, my desktop background will sometimes change to a pornographic image and my computer will just shut down without warning sometimes. HELP! Attached are my Hijack This scan results. Thanks :)
  6. guiltyassyn

    guiltyassyn TS Rookie

    Scan Results

    Ok, I completed the above-mentioned steps and the problems seem to be fixed. I'm attaching my new HiJack This and Malware scan results. Hopefully everything look ok. Thanks!

    Attached Files:

Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.