1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

I've been infected!

Discussion in 'Virus & Other Malware Removal' started by Charles Taylor, Nov 9, 2007.

Thread Status:
Not open for further replies.
Advertisement
  1. Charles Taylor

    Charles Taylor Thread Starter

    Joined:
    Nov 9, 2007
    Messages:
    3
    I scanned the program with my antivirus and no thread was detected. After i opened it i got a warning that a windows file has been replaced. My computer got really slow. Then a blue background with something like "dumping physical memory to disk" came up. I restarted it and it took a long time to boot. i have the file that messed me up
    please help

    link to possible malware removed for safety
     
  2. Charles Taylor

    Charles Taylor Thread Starter

    Joined:
    Nov 9, 2007
    Messages:
    3
    hijack this is too slow to respond
     
  3. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,452
    First Name:
    Derek
    go to here and download 'Hijack This!' self installer. Save it to the desktop or other suitable place. DO NOT just press run from the website Double click on the file and it will install to C:\program files\hijackthis and create an entry in the start menu.
    Click on the entry in start menu to run HijackThis
    Click the "Scan" button, when the scan is finished the scan button will become "Save Log" click that and save the log.
    Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.
    It will possibly show issues deserving our attention, but most of what it lists will be harmless or even required,
    so do NOT fix anything yet.
    Someone here will be happy to help you analyze the results.
     
  4. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,452
    First Name:
    Derek
    it appears to be a file infector at first glance but we are looking at it and will see if any damage is repairable or not
     
  5. Charles Taylor

    Charles Taylor Thread Starter

    Joined:
    Nov 9, 2007
    Messages:
    3
    my computer came with hijackthis but it freezes when its doing its scan or before it comes up. ctrl+alt+del brings up a huge list of cmd.exe's and .EXE.EXE's
     
  6. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,452
    First Name:
    Derek
    One of the other gold shields has been working on this one since we got the copy of the field from you & he will reply soon with what we believe should fix it
     
  7. Jintan

    Jintan

    Joined:
    Oct 3, 2007
    Messages:
    1,164
    I was able to do some trial work with the infection Charles Taylor, and based on the data from that see some repair steps we can start to get the system back in order there. I need you to check if you can reboot into Safe Mode first, as the repairs procedures will be centered n this. To boot into Safe Mode, at startup tap the F8 key and select Safe Mode from the menu. If you can, try not to be tempted to effect your own repairs just yet, as an incomplete repair will allow the infection to recreate itself. Also do you know if this system has Internet Explorer 6, or the newer IE 7 installed?
     
  8. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/649857

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice