TechSpot

Virus from facebook?

By [TC]
Jul 6, 2008
  1. Hi guys,

    Hope someone can help me here.

    I was sent a notification email from facebook to say that a friend of mine had joined a group (if 100,000 people join i will show my boobs) and it was inviting me to join. I clicked on the group and there was a weblink with a .zip file. Now I feel really stupid because i clicked on the link and actually tried to open the zip file. Bad move, I don't know what possessed me. The thought of boobs probably!

    Anyway since then things have happened progressively. At first it just shut down all my programs and then the computer rebooted. And then rebooted again. and again. There was a moment where a msg came up saying a program was trying to close. If I didn't close it the computer would stay on but when browsing no gif's or pictures would load unless i right clicked and selected show picture.

    I pulled the network cable from the port on the back of the machine and rebooted the computer. It worked normally until I plugged the network back in. Then all the rebooting started again.

    I found this website and thought I would join and ask the question. However to join I had to go through a few steps and the computer was getting worse and worse.

    Finally now it only starts in safe mode. If I start in normal mode it just reboots and reboots. Windows doesn't even finish loading now. Even in safe mode, if I start with networking and go to say google for example, the moment I try to type something it closes the window.

    I then pulled that hard drive out and switched back to an older one to get back online and post this thread.

    What can I do if anything?

    What is this, a virus or something else? I have a copy of the zip file if needed.

    I appreciate any help and thank you in advance.
     
  2. ShoeGirl

    ShoeGirl TS Rookie

    Too me it sounds like a virus got through, my advice to you would be get a Anti-Virus Software, something quick and free would be AVG which you can download, just let it scan and see what it comes up with.

    ShoeGirl:blush:
     
  3. ---agissi---

    ---agissi--- TechSpot Paladin Posts: 1,977   +15

    Heres what I would do.
    Start > Run> CMD
    Type in TASKLIST
    Write down all processes that arent yours or windows related.
    Kill them with TASKKILL /IM *THREAD NAME* /t /f
    /t kills the tree its in, what made it and so fourth. /f forces it to die.
    Taskkill /pid *tasks pid* /t /f also works well

    Then delete everything in C:\temp and your documents and settings local temp. (its a hidden folder)

    Do a search on the file names of the virus/bogus files (edit) that were running, and delete them. copy a file, any file, with the same name and extension into the place where they were. In CMD, in their directory, use ATTRIB *filename/ext* +R +H +S to give the file Read Only, Hidden, System File attributes. Now it cant regenerate itself which they often do.

    .02
     
  4. redlightning

    redlightning TS Rookie

    I joined because I had received the same virus. I tried to follow agissi's steps, but when I try running cmd, it says "choose the program you want to open this file". What's up with this?
     
  5. ---agissi---

    ---agissi--- TechSpot Paladin Posts: 1,977   +15

    Yeah they often bug out cmd and/or task manger. Try using COMMAND rather than CMD, or directly execute cmd in C:\WINDOWS\system32\cmd.exe .
     
  6. xxdanielxx

    xxdanielxx TS Rookie Posts: 1,069

    on the bottom of my sig click on the malware removal guide follow the steps then post back with the 3 logs.

    combofix
    hijackthis
    superantispyware


    boobies lol nice
     
  7. redlightning

    redlightning TS Rookie

    Well, this one appears to have bugged out every .exe program I have. I tried installing Hijackthis and things like that, but it won't let the programs run.
     
  8. xxdanielxx

    xxdanielxx TS Rookie Posts: 1,069

    please open a new thread for your problem hijacking some ones thread is not allowed
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...