We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

VIRUS WARNING - ADOBE READER "Error" - DO NOT CLICK "OK"

2»

Comments

  • quoia
    quoia Posts: 14,524
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    Forumite
    Sorry for the delay in replying :)

    The GOOD NEWS is that my PC is sorted

    The original problem, (Kaka 2009 ?) looks as though the restore I did sorted that out.

    Definitely not had the same problem again.

    However that did leave the subsequent issue of the SVCHOST.exe process using loads of CPU time and IE windows spuriously opening up, or being redirected, to "dodgy" or unrequested websites.

    After a while I started getting an AVG threat warning for the PAKES Trojan infection
    This manifested as every 5 to 6 minutes a file (svchost.exe) being created/opened/accessed in a folder xxxx.tmp (xxxx = any 4 random letters) under C:\WINDOWS\Temp

    Anyway I had a quick Google for combinations of Pakes Trojan SVCHOST etc and came across a very similiar reported problem that had been resolved.

    The specific bit I needed was


    Go to http://support.kaspersky.com/viruses/solutions?qid=208280684

    and Download TDSSKiller.zip to your Desktop.

    Extract its contents to your desktop and drag TDSSKiller.exe on the desktop, not in the folder.

    Start > Run and copy/paste the following command into run box and hit Enter.

    "%userprofile%\Desktop\TDSSKiller.exe" -l C:\TDSSKiller.txt -v

    If TDSSKiller alerts you that the system needs to reboot, please consent.

    When done, a log file should be created on your C: drive named "TDSSKiller.txt"

    It basically found
    Results:
    Memory objects infected / cured / cured on reboot: 3 / 3 / 0
    Registry objects infected / cured / cured on reboot: 0 / 0 / 0
    File objects infected / cured / cured on reboot: 1 / 0 / 1

    The infected file object was

    C:\WINDOWS\system32\drivers\atapi.sys


    Hope this might be of use to anyone with the same or a similar problem.
    There are 10 types of people in the world. ‹(•¿•)›
    ‹(•¿•)› Those that understand binary and those that do not!


    Veni, Vidi, VISA ! ................. I came, I saw, I PURCHASED
    (11)A104.28S94.98O112.46N86.73D101.02(12)J130.63F126.76M134.38A200.98M156.30J95.56J102.85A175.93
    S LOWER CASE OMEGA;6.59 so far ..
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 355.7K Banking & Borrowing
  • 254.9K Reduce Debt & Boost Income
  • 456.1K Spending & Discounts
  • 248.3K Work, Benefits & Business
  • 605.9K Mortgages, Homes & Bills
  • 179K Life & Family
  • 263.7K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.