Help removing virus/malware

waddler_8

I take it you're not in front of the infected computer then now? PM me next time you are before running through these below.

I'm pretty sure this is loading the culprit:

StartupFolder: c:\docume~1\dgoodh~1\startm~1\programs\startup\ctfmon.lnk - c:\windows\system32\rundll32.exe

Boot into safe mode, navigate to the startup folder (c:\documents and settings\dgoodhand\start menu\programs\startup) and delete ctfmon.lnk

Then boot into normal mode and run combofix.

Go here and read through the instructions for downloading and running ComboFix:

Bleeping Computer ComboFix Tutorial

• Ensure you temporarily turn off your antivirus (Avast) before running. Instructions here
• Double click combofix.exe & follow the prompts closely.
• When it's finished, it'll produce a log. Post the contents of that log.
• It'll be found on your C:\ drive named combofix.txt

DaveG247

Yeah I'm at home now so will do, thank you very much for your help I'll see if I can get it started in safe mode. Cheers Dave

waddler_8

Oh yeah - I forgot.

Just boot into normal mode as you have been doing without connecting to internet and see if you can delete it - Then reboot & run combofix.

Dexters_Indignation

The easy way....

Get Revo.
http://www.revouninstaller.com/

It kicks a55

waddler_8

Not sure how you think that will help...?

Malware such as this doesn't install in the normal way - There's no uninstaller to run. It's files executed from load points from within the registry.

greenclaire

I had the exact same screen when I tried to access a webpage for a local festival.
I switched it off and on, removing the internet connection (on laptop so just turned off the wireless button).
Then did a system restore. That worked for me. You can access sytem restore through start - control panel - then search for 'system restore' in the search box cos it's different for each version of windows.
Good luck.
Claire