2 replies to this topic

[Barbzzz]

Something my son downloaded last night (and he claims it was only a picture and I found nothing else in the history) is creating havoc on my laptop. A file constantly replicates to the point where I've got nearly 1500 of them that I can't get rid of. I've tried all the 8 steps in the techspot forum -- avg/cccleaner/malwarebytes, etc., and nothing has worked. All files bear a name with 30+characters of seemingly random numbers and letters with a .rar extension. Type of file just says file, and range in size from 8 to 9kb. Please, help. Save my son's life.

Attached Files

•  hijackthis_2.txt   6.85KB   316 downloads

[CatByte]

Hi,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

• Disable any script blocking protection
• Double click dds.pif to run the tool.
• When done, two DDS.txt's will open.
• Save both reports to your desktop.

---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.

NEXT



Download GMER Rootkit Scanner from here or here.

• Extract the contents of the zipped file to desktop.
• Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
• If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.
  
  
  Click the image to enlarge it
  
• In the right panel, you will see several boxes that have been checked. Uncheck the following ...
  • Sections
  • IAT/EAT
  • Drives/Partition other than Systemdrive (typically C:\)
  • Show All (don't miss this one)
• Then click the Scan button & wait for it to finish.
• Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  
• Save it where you can easily find it, such as your desktop, and post it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

[CatByte]

Due to inactivity this topic will be closed. If you need help please start a new thread.