Hey guys, nice forum I never knew existed.
My sisters laptop somehow got infected with a nasty virus. It started with a windows restore screen that wanted you to buy it to fix the issues.
I tried to get rid of it. And i think i have managed to, except all the programs are hidden, and i got the files to show finally. including system restores.
-Now i still have the PING.EXE *32 using 100% CPU and cant figure it out.
-Also getting an Interactive Services Detection saying. " A program running on this computer is trying to display a message. When I go to the message its just a CMD prompt with spam: Reply from (some IP address)
-Firewall will not turn back on.
-Was getting some redirecting to spam websites.
I have ran, Malewarebytes, Kapersky, TDSSkiller, Superantispyware, and Spybot. Lots of junk was removed now stuck here
Thanks in advance
Any help would be of great help.
-Gray
Hi there I believe I know what this is but, lets confirm that first
Download OTL to your Desktop
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Select All Users
Under the Custom Scan box paste this in netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
C:\Windows\assembly\tmp\U\*.* /s
CREATERESTOREPOINT
Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Post both logs
THEN
Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan
[external image: Posted Image]
On completion of the scan click save log, save it to your desktop and post in your next reply
