Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Search Search
Search for:
Tech Support Guy > > >

Virus in Roaming folder - PLEASE HELP!

(In Progress)
(!)

MissMarieTM's Avatar
MissMarieTM MissMarieTM is offline
Junior Member with 1 posts.
THREAD STARTER
 
Join Date: Aug 2010
05-Aug-2010, 06:32 PM #1
Unhappy Virus in Roaming folder - PLEASE HELP!
Hey there!
Let me begin by saying I have Windows Vista, 32 Bit, Antivirus is Avast! Home.
I was browsing the web today, looking at Geek furniture, (Honestly. I run a blog for geeks) and my Antivirus warned me when I visited a particular page, that a threat was found. I'm not sure if this was the cause, or if the problem was already there. Here's what's going on:

After my computer slowing down VERY NOTICEABLY, on any program or process, I decided to reboot. When it started back up, it gave me the following error: "C:\Users\Aaron\Appdata\Roaming\Forfilesd.dll - Cannot be loaded, has a virus." So the first thing I did, was shut my computer off once again, and run System Restore. Not sure if that was the best thing to do, but it's been done. I restored it to two days ago, and rebooted. The same file error came up. So then I ran my Antivirus, specifically into the Roaming folder, and it came up clean. Now the dll file is currently in the Virus Chest of my Avast, and thus why I believe the Roaming folder came up clean. But my system is slowing to a crawl, and it is (of course) giving me the same error that the dll cannot be loaded every time I reboot. It is reading it as a Windows32 Malware-Gen. How do I fix this? How do I restore the file? Please help!
CatByte's Avatar
Malware Removal Specialist with 3,884 posts.
 
Join Date: Feb 2009
08-Aug-2010, 09:34 AM #2
Hi

Please do the following:



Please download MBRCheck.exe to your desktop.
  • Be sure to disable your security programs
  • Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
  • A window will open on your desktop
  • if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
  • If nothing unusual is found just press Enter
  • A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
  • Please post the contents of that file.



NEXT



Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.pif to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.



NEXT


Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.
  • Double click the exe file.
  • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.


    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


Similar Threads
Title Thread Starter Forum Replies Last Post
Files with Same Name in Same Folder? Please help FutureKing Windows XP 9 10-Sep-2009 06:06 AM
Virus in Airline ticket please help arb3 Virus & Other Malware Removal 1 09-Aug-2008 12:12 AM
I think there's a Trojan virus in my computer - Please HELP! A.D.D. Guy Virus & Other Malware Removal 1 07-Apr-2008 06:54 PM
MSN/Yahoo Virus...In a Panic !Please HELP!! kickrz Virus & Other Malware Removal 5 16-Nov-2007 11:05 PM
Backdoor-CVT trojan and series of virus in my computer.. please help bummy5799 Virus & Other Malware Removal 2 31-Oct-2007 02:11 PM

WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑