Hi!
I accidentally downloaded and ran a .lnk file that I got from a friend over Skype.
He also sent me a file called "393306_308658815829506_100000561692617_1199148_1381458257_n.lnk" which I did not run.
No window opened when I ran it, and that .lnk was not a recognized filename.
I tried several times, with the same error.
When asked which program to run lnk file with, I tried opening it with MS Office. This didn't work, and then I gave up.
When I started the computer the next morning, the startup was slow, and all icons on the desktop were changed to the icon of MS Office.
My default anti-virus (Panda Global Protection 2012) and my firewall were deactivated whe I booted.
Every time I tried to start a program, it booted MSWord instead.
I did a quick scan with Panda, and found only cookie spyware: nothing related to the lnk files or malware-related.
I've also run Malwarebytes' with no detected viruses.
My HijackThis logfile came out clean when run through www.HijackThis.de
Any idea what to do next? Should I rescan/post the logfiles?
Thanks,
Ruddy.
**In any case where you happen to be busy or unable to give us a reply, we would be grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days.
Hello there, Ruddy
I'm Conspire, I'll be glad to help you with your computer problems.
Please observe these rules while we work:
Read the entire procedure
It is important to perform ALL actions in sequence.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Stick with me till you're given the all clear.
Remember, absence of symptoms does not mean the infection is all gone.
Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.
IMPORTANT NOTE : Please do not delete anything unless instructed to. Remember to backup all your important data(if possible) before moving on.
Double click DDS icon to run the tool (may take up to 3 minutes to run)
When done, DDS.txt will open.
After a few moments, attach.txt will open in a second window.
Save both reports to your desktop.
—————————————————
Post the contents of the DDS.txt report in your next reply
Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.
Please download GMER from one of the following locations, and save it to your desktop:
Main Mirror This version will download a randomly named file (Recommended)
Zip Mirror This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.
Extract the contents of the zipped file to desktop (applicable only to Zip mirror) .
Double click [external image: Posted Image] or [external image: Posted Image] on your desktop.
If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO. [external image: Posted Image]
[external image: Posted Image] Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following …
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)
Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in your reply.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
