This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Your system is infected wallpaper

13 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Virus Total results: a-squared 4.5.0.50 2010.01.29 - AhnLab-V3 5.0.0.2 2010.01.29 - AntiVir 7.9.1.154 2010.01.29 - Antiy-AVL 2.0.3.7 2010.01.28 - Authentium 5.2.0.5 2010.01.29 - Avast 4.8.1351.0 2010.01.29 - AVG 9.0.0.730 2010.01.29 - BitDefender 7.2 2010.01.29 - CAT-QuickHeal 10.00 2010.01.29 - ClamAV 0.96.0.0-git 2010.01.29 - Comodo 3749 2010.01.29 - DrWeb 5.0.1.12222 2010.01.29 - eSafe 7.0.17.0 2010.01.28 - eTrust-Vet 35.2.7270 2010.01.29 - F-Prot 4.5.1.85 2010.01.29 - F-Secure 9.0.15370.0 2010.01.29 - Fortinet 4.0.14.0 2010.01.28 - GData 19 2010.01.29 - Ikarus T3.1.1.80.0 2010.01.29 - Jiangmin 13.0.900 2010.01.28 - K7AntiVirus 7.10.959 2010.01.28 - Kaspersky 7.0.0.125 2010.01.29 - McAfee 5875 2010.01.28 - McAfee+Artemis 5875 2010.01.28 - McAfee-GW-Edition 6.8.5 2010.01.29 - Microsoft 1.5406 2010.01.29 - NOD32 4818 2010.01.29 - Norman 6.04.03 2010.01.28 - nProtect 2009.1.8.0 2010.01.29 - Panda 10.0.2.2 2010.01.29 - PCTools 7.0.3.5 2010.01.29 - Rising 22.32.04.03 2010.01.29 - Sophos 4.50.0 2010.01.29 - Sunbelt 3.2.1858.2 2010.01.29 - Symantec 20091.2.0.41 2010.01.29 - TheHacker [removed].170 2010.01.29 - TrendMicro 9.120.0.1004 2010.01.29 - VBA32 3.12.12.1 2010.01.29 - ViRobot 2010.1.29.2162 2010.01.29 - VirusBuster 5.0.21.0 2010.01.29 - Additional information File size: 14024 bytes MD5…: f8c6bafda6cfb84b80efe354bb985dd4 SHA1..: 06fd7eb8bd9e03569a80571a55fe06b28abfccfb SHA256: bfcce42b0490b4a628493ba2534e0996191147d51cb1e00211f150903e02c552 ssdeep: 384:0Ct4gge43G5NC22MwbBgZYaDIoT/CkXNfQrhuwHmCmzPqd:0C3bEBADxxN4N uwHmTO PEiD..: - PEInfo: - RDS…: NSRL Reference Data Set - pdfid.: - trid..: Unknown! sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned
When I try to Run Fix in the OTL program, the background changes back to my original background, the entire taskbar at the bottom (the one with the system tray and the start button) completely disappears, and the OTL program remains. Through this process it completely locks up. It doesn't exactly freeze, but the OTL program changes to "not responding", and I can't do "control, alt, delete" as it just brings up a notice saying that the administrator has locked that task or something like that. Obviously this is something with the virus because I am the owner of this computer and haven't changed anything like that. Paul
Hello yaaaabuddy03,

Sorry for the delay in getting back to you.

Lets try to take a different approach.

Please restart your computer manually (push the power button in until your computer restarts/shuts down.)

We are going to use a different tool now.

Running ComboFix
Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your Anti-Virus and Anti-Spyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

  • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

  • Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the ComboFix log in your next reply as well as describe how your computer is running now
Hello yaaaabuddy03! It's been several days since I last posted instructions for you to complete. Do you still require assistance in getting your computer cleaned up? Thanks, SweetTech.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI