ramnit 32win patched infected

sitcom321

No it wont let me in, same with anything to do with security I am unable to open anything like that

waddler_8

Worth a try...

Can you download this -> http://www.gmer.net/download.php

It'll be randomly named executable.

sitcom321

no fraid not able to open it up

waddler_8

How about this -> http://www.infospyware.net/sUBs/dds

sitcom321

it actually ran that but wouldnt save the log just closed down, have run it 3 times now but same thing, cant get log to save or even view it

waddler_8

Can you get into safe mode? If so, try to run it from there.

closed

start, run,

shutdown - a

might help stopping it from closing down if you're quick

have you got another pc available to download the kaspersky boot disc iso? if you can get that, then burn as a disk image using imgburn, then boot from it, update, and scan

You probably need to remove this

C:\Docu ments and Settings\Carole\Local Settings\Application Data\lesyyght\tkgahfkx.exe

you could also try these

http://downloadcenter.mcafee.com/products/mcafee-avert/stinger10.2.0.250.exe

http://security.symantec.com/nbrt/npe.aspx?lcid=1033

waddler_8

I think she means that DDS or the notepad log was shut down.

waddler_8

closed wrote: »

You probably need to remove this

C:\Docu ments and Settings\Carole\Local Settings\Application Data\lesyyght\tkgahfkx.exe

From the other thread...

https://forums.moneysavingexpert.com/discussion/3435575

========== FILES ==========

File/Folder C:\Documents and Settings\Carole\Local Settings\Application Data\lesyyght\tkgahfkx.exe not found.
Folder move failed. C:\Documents and Settings\Carole\Local Settings\Application Data\lesyyght scheduled to be moved on reboot.

Files moved on Reboot...
Folder move failed. C:\Documents and Settings\Carole\Local Settings\Application Data\lesyyght scheduled to be moved on reboot.

The HJT entries remained after fixing too.

closed

does it shutdown on it's own if you run regedit, or go to an antivirus site?

It would be better, (and cheaper) to sort it yourself by scanning with a boot disc, then backup data, then reinstall windows. I can't see a techie spending hours trying to cleanup a difficult virus for £25.