Forum Home
Press F1
 
Thread ID: 71988 2006-08-24 20:40:00 New computer is infected anderson3250 (11038) Press F1
Post ID Timestamp Content User
480572 2006-08-25 16:38:00 I tried using Killbox, but it had no effect. I tried to download rootkit revealer as well, but it won't download. If I am able to get it downloaded I will post what I can. anderson3250 (11038)
480573 2006-08-25 18:44:00 Get ccleaner (http://www.ccleaner.com)

Download, install and run it.
Speedy Gonzales (78)
480574 2006-08-25 18:55:00 I already have it. anderson3250 (11038)
480575 2006-08-25 19:19:00 Have you got Spybot (www.spybot.info) or Adaware (www.lavasoftusa.com)

If not download install, and update Spybot then do a scan.
Speedy Gonzales (78)
480576 2006-08-25 21:11:00 Both of the programs fall short in detecting my problem. Let me state it now, I have tried many many virus, trojan, spyware, and malware scanners. I have noticed multiple instances (6) IEXPLORE.EXE that are using 13000 each. Its most likely related since I do not use IE at all. anderson3250 (11038)
480577 2006-08-25 21:13:00 did you uninstall one virus checker as reccommend in a earlier post, running two virus checkers maybe producing false positives ( finding somthing thats not there) as well as a few other problems beama (111)
480578 2006-08-25 21:56:00 Whe I ran Hijackthis I was already in the process of removing norton. I had the virus popup before I downloaded avg and now with norton gone and a reinstallation of AVG, I am 100% sure it is a virus. Online scanners eve say the files that I find are viruses. anderson3250 (11038)
480579 2006-08-25 23:20:00 Since it is a new computer why not just cut all the hassle and use the restore discs or reformat to wipe the hard drive clean and start again? FoxyMX (5)
480580 2006-08-26 01:41:00 When you say Killbox had no effect I assume it deleted the files in the temp folders but the issue remains.

Strange you can't get RR from the below link, try going to the program page:
www.sysinternals.com
The download link is at the very bottom of the page.

Also, if you find multiple iexplore.exe's running, do a hijackthis log at that point, by comparing with the below clean-looking one we may be able to see what is launching.
silvero (11011)
480581 2006-08-26 02:36:00 One more thing that may be useful, run hijackthis, press the config button, under StartupList put a check in the minor sections checkbox, press Generate StartupList log, and then say yes. This may find the startup location of the problem. silvero (11011)
1 2 3