Virus????

aliEnRIK

susi wrote: »

I have installed Hyjacker but when I try to run it its saying "For some reason your system denied write access to the hosts file. If any hyjacked domains are in this file Hyjack this may NOT be able to fix this". It then tells me to edit the file myself by exiting Hyjack, right clicking the icon and using run as administrator but for some reason I cant do this (the option dosent even come up)

Whilst pressing the SHIFT key, RIGHT CLICK and select RUN AS (Admin)

susi

Ok I think Im missing something here as I cant seem to make it happen :-( I run AVG again and the results are

Warnings found registry key with reference to infected file C:\program files\Dell support Centre\gs_agent\custom\dsca.exe Potentially dangerous object

Infections......
"C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe";"Virus found Corrupted";"Infected"
"C:\Program Files\Common Files\microsoft shared\ink\Microsoft.Ink.dll";"Virus found Corrupted";"Infected"
"C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.oem.b104\patch-jre1.6.0.oem.b104\zipper.exe";"Virus found Corrupted";"Infected"
"C:\Program Files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe";"Virus found Corrupted";"Infected"
"C:\Program Files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe";"Virus found Corrupted";"Infected"
"C:\Program Files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe";"Virus found Corrupted";"Infected"
"C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe";"Virus found Corrupted";"Infected"
"C:\DELL\MediaDirect\XPePatch_070512.exe:\\engine32.cab:\DotNetInstaller.exe";"Virus found Corrupted";"Infected"
"C:\DELL\MediaDirect\XPePatch_070512.exe:\\engine32.cab";"Virus found Corrupted";"Infected"
"C:\DELL\MediaDirect\XPePatch_070512.exe";"Virus found Corrupted";"Infected"

Im so sorry to be a pain and you must be getting frustrated with me as it will all seem so obvious to you but its all gobbledy gook to me

Browntoa

don't worry ,Rik has the patience of a saint...lol

we all know that not everyone has the technical expertise to understand this sort of stuff

closed

Probably a false positive

upload the identified files here, to see if they are really infections

http://www.virustotal.com/

then uninstall avg http://www.avg.com/us-en/download-tools and switch to avast http://download.cnet.com/Avast-Free-Antivirus/3000-2239_4-10019223.html

If you are using avg8, this may be the reason

http://forums.avg.com/es-en/avg-free-forum?sec=thread&act=show&id=101475

You should be able to still post a hjt log.

susi

Right I have uninstalled AVG and Installed avast, done a full scan it showed i threat which has now been contained in the virus chest, it was btwebcontrol.dll dont know if that means anything to any of you. Can I assume my computer is now clean?

bat999

susi wrote: »

Can I assume my computer is now clean?

That's up to you.
But why not follow the advice in post #2.

susi

I have tried to follow post 2, hve downloaded and run MALWAREBYTES and downloaded hyjacker and scanned but cant save to log, first when I click save its telling me hyjackthis.log already exists do you want to replace it,when i press yes it then says it cannot find the program file, when I click to create a new file nothing happens. I have tried the right click and the option to run as administrator does not come up (I have tried to right click on everything just in case I got the wrong one)

macman

You need to run a MalwareBytes Full Scan (not the Quick Scan). And update MBAM before you do that.

aliEnRIK

susi wrote: »

(I have tried to right click on everything just in case I got the wrong one)

Just to clarify, you have tried whilst ALSO pressing and holding the SHIFT key yes?

susi

Hi Rik, yes I was holding the key, just to make sure can you tell me again when I should be doing this???