I already know this has been posted and answered before, but I don't know if the same processes or fixes will apply to me as well.
I had Mcafee working fine, then i got ping.exe trying to use all my cpu memory so i got Malwarebytes Anti-Malware to try to get rid of it. but that didn't work it only got rid of other things
I've noticed this new process in my process list named 「PING.EXE」, and it is taking up my CPU more than usual, it's always at 1,000,000K , and my PC is running much slower
now after running the Malwarebytes anti-malware when i restarted the computer my McAfee's firewall keeps on shutting off and Malwarebytes anti-malware keeps on detecting ping.exe and blocking it. But ping.exe still uses over 1000000K.
Please help!!
this is my HijackThis log:
right now im scanning the computer with aswMBR, so as soon as i get the log i will copy and paste it here
this is the post of aswMBR:
aswMBR version 0.9.8.986 Copyright© 2011 AVAST Software
Run date: 2011-09-21 00:28:38
—————————–
00:28:38.197 OS Version: Windows x64 6.1.7601 Service Pack 1
00:28:38.197 Number of processors: 4 586 0x2A07
00:28:38.198 ComputerName: CHRISV-PC UserName:
00:28:40.009 Initialize success
00:31:41.883 AVAST engine defs: 11092001
00:35:59.343 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
00:35:59.345 Disk 0 Vendor: SAMSUNG_ 2AJ1 Size: 610480MB BusType: 3
00:35:59.353 Disk 0 MBR read successfully
00:35:59.355 Disk 0 MBR scan
00:35:59.358 Disk 0 Windows 7 default MBR code
00:35:59.360 Service scanning
00:36:07.659 Modules scanning
00:36:07.662 Disk 0 trace - called modules:
00:36:07.671 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
00:36:07.674 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007ea6060]
00:36:07.677 3 CLASSPNP.SYS[fffff88001dc543f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800607c050]
00:36:09.419 AVAST engine scan C:\Windows
00:36:13.164 AVAST engine scan C:\Windows\system32
00:38:13.868 AVAST engine scan C:\Windows\system32\drivers
00:38:25.369 AVAST engine scan C:\Users\Administrator
00:43:03.824 AVAST engine scan C:\ProgramData
00:44:58.767 Scan finished successfully
00:47:18.357 Disk 0 MBR has been saved successfully to "C:\Users\Administrator\Documents\ping.exe issue\MBR.dat"
00:47:18.363 The log file has been saved successfully to "C:\Users\Administrator\Documents\ping.exe issue\aswMBR.txt"
so far that is the only things i know that i should do. but now i dont know what else to do.
the other thing that i should add is the fact that ever since i been having this issue, virus. When i search for something on a search engine and i click my selection it send me to some advertising pages not the one that i selected. "comparestores.net" or "search-fast-results.com" and many other that are really irritating.
Hello,
Welcome to
WhatTheTech . My name is
mowman , and I will be helping you fix your problems.
If you do not make a reply in 3 days, we will have to close your topic.
You may want to keep the link to this topic in your favorites. Alternatively, you can click the
Options button at the top bar of this topic and
Track this topic. The topics you are tracking can be found by clicking on
My Topics at the top of any page.
Please take note of some guidelines for this fix:
•Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
•If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
•Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
•Please reply using the button in the lower right hand corner of your screen. Do not start a new topic.
The logs that you post should be pasted directly into the reply .
Only attach them if requested or if they do not fit into the post
Please download
TDSSKiller.zip Extract it to your desktop Double click TDSSKiller.exe Press Start Scan Only if Malicious Cure is selectedsuspicious objects are found select skip Then click Continue > Reboot now Copy and paste the log in your next replyA copy of the log will be saved automatically to the root of the drive (typically C:\) Download OTL Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted. When the window appears, underneath Output Minimal Output . Check the boxes beside LOP Check and Purity Check . Under Custom Scan paste this in Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long. When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt . These are saved in the same location as OTL. Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
Due to inactivity this topic will be closed.
If you need help please start a new thread.
New members follow the instructions here
http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic
