Think my computer has been infected

greendot

Has my Tosh Satellite L300 been infected ?--- It runs for 35 min's with Windows Defender then stop's at this--- \$RECYCLE.BIN\S-1-5-21-1204312611-343013293-1232531122-1000\$RHHK1PH\netfx_Core.mzz->msvcr_dll_x86

Also a previous time it shut down with [ Problem event name-Bluescreen ]

Thank you for any help, Brian

greendot

It stop's then freezes, no response, have to turn off, will try your info.

GunJack

green, might be a good idea to start your own thread, it's easier for peeps to help out if we can follow a single issue through in one thread

greendot

Found 3 worms [ what are these ? ] and have fixed them , i'm now runing Hijack Hunter, will report back with results, so good so far, i have paid £50 x 2 to fix these problems, should have come here first lol, thank's.

greendot

GunJack wrote: »

green, might be a good idea to start your own thread, it's easier for peeps to help out if we can follow a single issue through in one thread

Sorry your right but i was in need of quick info and he was still logged on

greendot

RussJK wrote: »

It shouldn't have taken an hour for a quick scan, did you run a full scan? Full scan does very little extra compared to quick scan.

Please post the Malwarebytes log, otherwise I can't really tell you. Load Malwarebytes, and go to the Logs tab and copy/paste every entry that contained a detection.

What do you mean you've paid £50 x 2? To whom?

The problems i have is with my tosh netbook and i'm asking for info through my desktop computer, i have only done a quick scan,
these are the results from malwarebytes: Memory Processes infected-C:\program files\IDM\desktop sms\desktopsms.exe[Worm.P2P]->2576->unloaded process sucessfuly

Registry values infected-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WINDOWS\curentVersion\RUN\Desktop SMS[WormP2P]->Value:Desktop SMS-> Qarentined and deleted successfuly

Files infected-
C:\program files\IDM\desktop SMS\desktopsms.exe[Worm.2P2]-> Quarentined and deleted successfuly

greendot

£50 x 2 is to people in the local paper who said they had fixed my problem's. [ not ]

GunJack

greendot wrote: »

£50 x 2 is to people in the local paper who said they had fixed my problem's. [ not ]

sounds like you've been well and truly ripped off. Gits like that give good techies a bad name :mad:

greendot

greendot wrote: »

The problems i have is with my tosh netbook and i'm asking for info through my desktop computer, i have only done a quick scan,
these are the results from malwarebytes: Memory Processes infected-C:\program files\IDM\desktop sms\desktopsms.exe[Worm.P2P]->2576->unloaded process sucessfuly

Registry values infected-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WINDOWS\curentVersion\RUN\Desktop SMS[WormP2P]->Value:Desktop SMS-> Qarentined and deleted successfuly

Files infected-
C:\program files\IDM\desktop SMS\desktopsms.exe[Worm.2P2]-> Quarentined and deleted successfuly

I have done a Windows Defender scan and this time it completed and found no problem's, will do a full Malwarebytes scan next, i don't know how to send the Hijack Hunter log file from my netbook to this computer and then for you to look at, but thank you for help and info.:T