We're aware that some users are experiencing technical issues which the team are working to resolve. See the Community Noticeboard for more info. Thank you for your patience.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

I think I'm infected with a virus!

Options
12346»

Comments

  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Jason ~ if you can a fresh install really is the way to go (But you need to completely clean that USB gizmo first else youll just reinfect yourself)

    If you wish to push on with cleaning your computer ~

    rerun ccleaner to remove the temp files

    Open notepad and copy/paste the text in RED below

    File::
    c:\windows\ativpsrm.bin
    c:\windows\system32\vcmgcd32.dll
    c:\program files\muyxe.txt
    c:\windows\system32\emptyregdb.dat
    c:\windows\pchealth\helpctr\OfflineCache\index.dat
    c:\windows\alcupd.exe
    c:\windows\system32\ChCfg.exe
    c:\windows\Alcrmv.exe
    c:\windows\system32\RtlCPAPI.dll
    c:\windows\system32\khmx0.dll
    c:\windows\soundman.exe
    c:\windows\system32\RTLCPL.exe
    c:\windows\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
    c:\windows\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
    c:\windows\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\places.exe
    c:\windows\system32\drivers\lrntmn.sys



    Save this as "CFScript"

    Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

    CFScript.gif


    This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply

    Combofix should never take more that 20 minutes including the reboot if malware is detected.
    If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.

    run ccleaner again in case anything got by what weve just deleted (Every chance considering the seriousness of the infection)

    Download FIREFOX

    Run LSPFIX

    Download HostsXpert
    http://www.softpedia.com/get/Security/Security-Related/Hoster.shtml
    and then follow the below steps.

    * Unzip HostsXpert.zip
    * It will create a folder named HostsXpert in whatever folder you extract it to.
    * Run HostsXpert.exe by double clicking on it.
    * click the Make Writeable? button.
    * click Restore Microsoft's Hosts File and then click OK.
    * Click the X to exit the program

    Run ccleaner again

    Attempt to run the kaspersky scan using firefox -Will probably need flash and or java installing for it ~
    https://addons.mozilla.org/en-US/firefox/browse/type:7
    :idea:
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Forgot to add. If I have this right, your realtek software has been infected so dont be suprised if this kills your sound. Should be able to reinstall all software once your clean (IF you can get clean)
    :idea:
  • geordie_lass_2
    geordie_lass_2 Posts: 1,941 Forumite
    edited 26 June 2009 at 8:56AM
    Jas0n wrote: »
    are there any other online scanners I can use?
    Trend's PC Cillin has an online virus scanner here http://housecall.trendmicro.com/uk/
    You may find that a virus may be preventing you from scanning properly or from installing anti-virus though.

    Formatting would be my preferred option, if you don't have an original XP disc and can't retrieve your MS serial code, how about using the Ubuntu OS?

    You would need to download it and make a bootable CD to use it (on a mate's computer) but it's a brilliant alternative to Windows.
    http://www.ubuntu.com/
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 350.8K Banking & Borrowing
  • 253K Reduce Debt & Boost Income
  • 453.5K Spending & Discounts
  • 243.8K Work, Benefits & Business
  • 598.6K Mortgages, Homes & Bills
  • 176.8K Life & Family
  • 257.1K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.