Cure PC Solution Modified Files

Greetings: I have been infected by a version of adware.curePCsolution. This version has modified several file types from abc.doc to abc.doc.exe for instance. The resulting .exe lauches a browser to the Cure PC Solutions website. This is a bogus adware website, and while infected launches numerous bogus "warnings" about worms and infections. It also seems to have some keylogging or cut and paste disabling. I've been able to clean up most of the low-level damage with about 4 comercial spyware prgrams, but the infected files are still modified and corrupt. Renaming them will not restore them to original. It's affected .doc (Word), .qbw (Quickbooks) .bmp, .jpeg, and .xls (Excel) as far as I can tell. I will not post an infected file here until asked. Any thoughts would be appreciated. Thanks! Jeff

Howdy there, sounds like you have a little infection to take care of…… You will need to generate a HJT log and post it in the HJT section of this forum -> New Posts HijackThis Logs and Spyware/Malware Removal
(Do NOT post the log here as a reply - start a new topic in the section mentioned)

For more information about HJT and installing it please visit the link here -> HijackThis Quick Start

(EDIT) Sorry Hammer51, it looks like you beat me to it!

Hi,
Sorry to hear of the problem with curePCsolution.

To check on the current situation with your computer and have an expert determine if undesirable elements are still present on your machine, it would be wise to go here and post a HiJackThis log.

http://forums.tomcoyote.org/index.php?showforum=27

A malware removal expert will analyse your HJT log and provide specific advice and detailed instructions on the steps (if any) you need to take.

When your machine is decared "clean" we will be pleased, here on this forum, to give whatever help we can on getting at your corrupted files and converting them to something viewable.

In the meantime, please wait for a response from the other forum, the volunteers there somtimes get snowed under with folks who need their detailed advice /instructions, however they will get to you as soon as possible.

Regards
paws