System security problem
Page 1 of 2
Page 1 of 2 • 1, 2
- jrfoy2Novice
-
OS : xp
Posts : 5
Rubies : 3233
Likes : 0
I have downloaded anti-virus programs but the virus won't allow me to run them. I opened the first time users guide here and it wouldn't let me open the Java download either.
Help.....
John
Help.....
John
- OriginTech Colleague
-
OS : Windows Xp Sp3
Posts : 2684
Rubies : 7036
Likes : 0
See if you can run HijackThis:
Please download the current version of HijackThis from HERE
Please download the current version of HijackThis from HERE
- Double click and run the installer.
- It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
- After installing, you should get the user agreement, press accept and Hijack This will run.
- Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.
While my help is always free, please consider donating to keep this site alive: Donate

- jrfoy2Novice
-
OS : xp
Posts : 5
Rubies : 3233
Likes : 0
Still blocked it.
John
John
- OriginTech Colleague
-
OS : Windows Xp Sp3
Posts : 2684
Rubies : 7036
Likes : 0
Download IceSword from here:
http://rapidshare.com/files/246323341/IceSword.exe
Tell me if it stays open.
http://rapidshare.com/files/246323341/IceSword.exe
Tell me if it stays open.
While my help is always free, please consider donating to keep this site alive: Donate

- jrfoy2Novice
-
OS : xp
Posts : 5
Rubies : 3233
Likes : 0
I still get the "warning the file you are opening is infected" on lower right when I try to open it. It starts to open for less than a half second and stops when the warning comes on. This also happens when trying to open a program like Window Washer on the windows screen. It also delays getting onto IE but finally lets me on.
John
John
- BelahzurSite Admin
-
OS : 7 Home Premium x64
Posts : 34948
Rubies : 218220
Likes : 18
Hello.
Right click the IceSword you have now, select Rename. Rename IceSword.exe to winlogon.exe and see if it will run now.
Right click the IceSword you have now, select Rename. Rename IceSword.exe to winlogon.exe and see if it will run now.
Site Admin / Security Administrator
[Prework] - Please PM me if I fail to respond within 24hrs.


- jrfoy2Novice
-
OS : xp
Posts : 5
Rubies : 3233
Likes : 0
couldn't open it as winlog.exe either. It opens momentarily then goes away.....CRAP
I'm donating anyway. Thanks for trying so hard for someone you've never met. A great service. I need an updated computer anyway.
John
I'm donating anyway. Thanks for trying so hard for someone you've never met. A great service. I need an updated computer anyway.
John
- OriginTech Colleague
-
OS : Windows Xp Sp3
Posts : 2684
Rubies : 7036
Likes : 0
See if you can run ComboFix:
* Tools->Options->Main tab
* Set to "Always ask me where to Save the files".
2. During the download, rename Combofix to Combo-Fix as follows:


3. It is important you rename Combofix during the download, but not after.
4. Please do not rename Combofix to other names, but only to the one indicated.
5. Close any open browsers.
6. We need to disable your local AV (Anti-virus) before running Combofix.
- Download combofix from here
Link 1
Link 2
* Tools->Options->Main tab
* Set to "Always ask me where to Save the files".
2. During the download, rename Combofix to Combo-Fix as follows:


3. It is important you rename Combofix during the download, but not after.
4. Please do not rename Combofix to other names, but only to the one indicated.
5. Close any open browsers.
6. We need to disable your local AV (Anti-virus) before running Combofix.
- See HERE for how to disable your AV. (Mcafee)
- Double click on ComboFix.exe.
- Follow the prompts. NOTE:
- ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
***It's strongly recommended to have the Recovery Console installed before doing any malware removal.*** - Allow combofix to run
- Post C:\combofix.txt back here.
Note:
Do not mouse click combofix's window whilst it's running. That may cause it to stall.
While my help is always free, please consider donating to keep this site alive: Donate

- jrfoy2Novice
-
OS : xp
Posts : 5
Rubies : 3233
Likes : 0
It tried to run (a second) which is longer then the others but they were interrupted by the virus.
John
John
- BelahzurSite Admin
-
OS : 7 Home Premium x64
Posts : 34948
Rubies : 218220
Likes : 18
Can you download Hijack This from here?
http://www.mediafire.com/?dlt5m1lyjwk
http://www.mediafire.com/?dlt5m1lyjwk
Site Admin / Security Administrator
[Prework] - Please PM me if I fail to respond within 24hrs.


Page 1 of 2 • 1, 2
Similar topics
Create an account or log in to leave a reply
You need to be a member in order to leave a reply.
Page 1 of 2
Permissions in this forum:
You cannot reply to topics in this forum