UNSOLVED

Charlieguitar

updated

22 years ago

0

27915

May 23rd, 2004 20:00

Virus Reformat?

I recently discoed a virus  while scanning with Mc Afee.For a few days I would delete the infected file only to find that it had returned. When I contacted McAfee they couldn't identify it (new worm) and requested that I send them an infected file which I did. Today things have worsened in that I am no longer able to open the Virus Scan program or many others with the extension .exe. I am encouraged by the fact that it is still possible to access the Internet and that the computer is running fairly well. The computer is a Dell Dimension Series type. Does anyone know of a way that this virus can be removed without erasing the hard drive?
  • Texruss

    2 Intern

    •

    3447 Posts

    336

    0

    Posted May 23rd, 2004 23:00

    Charlie: We need you to download and install an analysis and repair tool called Hijackthis.

    Go here and download the file: http://tomcoyote.com/hjt

    Please unzip Hijackthis.zip into a new folder you create in the root (first) level of the C: drive. Name this folder HJT for best and safest results. (don't unzip it into a temp folder or run the file from a temp folder, or the Windows Desktop, etc...as it needs a safe folder to keep backup logs). Also when people post here and place it on the Desktop the log usually shows their full name since their Windows user profile is commonly named with their full name. We try not to disturb your privacy. *;-)

    See this link for graphical instruction: http://russelltexas.com/spywareinfo/createhjtfolder.htm

    See my entire Hijackthis FAQ (Frequently Asked Questions) at:

    http://www.russelltexas.com/spywareinfo/faqhijackthis.htm

    After downloading, and unzipping the hijackthis file into a safe folder you create (preferably a folder named HJT in the first level of the C: drive)...run Hijackthis, click on the 'scan' button and then 'save log' button.

    Copy and paste the contents of the text file you save into a reply to this message. A lot of posters make mistakes here in copying and pasting so reread the left info sidebar called Copy and Paste at http://www.tomcoyote.com/hjt

    Special Notice! Hijackthis is a powerful tool that edits the brains of Windows (the Registry). DO NOT FIX anything in the Hijackthis log screen without assistance from the experts! Most of the line items in the scanned log are normal for Windows operation. Hijackthis should identify the vast majority of your problems and enable us to help you clean them off your system.


    Stay in this thread for continuity. Reply to this message.


    HTH (Hope that Helps)

    Texruss
  • 336

    0

    Posted May 24th, 2004 02:00

    Texruss,

    When I try to open the file I get the following: Windows cannot find'C:\Documents and Settings\MYNAME\LOCAL\ Settings\Temporary for hijackthis.zip\HijackThis .exe'

    As you can see my name is included even though the file was created in the root directory of C as per your instuctions. This causes me to doubt the veracity of the rest of the message especially when the file is right there in front of my eyes. This is the type of message that I get when I try to open other files and programs. In fact if I try to get online from the start directory one will appear but I get right on from the desktop. This leads me to believe that the files and programs are alright that it is the means by which they are accessed which is where the problems are. At this time I'm also begginng to notice slight glitches in the typing fom the keyboard (disappearing letters when I type others,etc.). Any further help will be appreciated. Hanging on----Guitarcharlie

  • Texruss

    2 Intern

    •

    3447 Posts

    336

    0

    Posted May 24th, 2004 04:00

    Charlie:

    Make a new folder HJT in the root level of C if you haven't already done so. Directly download this file and direct it to be placed in that folder:

    http://209.133.47.12/~merijn/files/HijackThis.exe

    Delete all other zipped copies of Hijackthis and run the new downloaded file.

    HTH,

    Texruss

  • 336

    0

    Posted May 24th, 2004 05:00

    Texruss:

    The same thing happens. This time the message is:

    Windows cannot find 'C:\HijackThis.exe      (At least my name wasn't included this time.)

    The icon for the file is seen right behind the message.

    The information shows that it was created at 2:50 AM and that it is 36.7 KB

    Guitarcharlie

  • ChrisRLG

    2 Intern

    •

    3945 Posts

    336

    0

    Posted May 24th, 2004 19:00

    in windows explorer find the hijackthis.exe file and right click - rename - to hjt-test.exe then try clicking the icon to open it.
  • ChrisRLG

    2 Intern

    •

    3945 Posts

    336

    0

    Posted May 24th, 2004 21:00

    On your desktop - create a folder called HJT (Right click a empty part of the desktop - new - folder - and rename to hjt)

    then click this link http://tomcoyote.com/hjt/ on the left find the words "HiJackThis from here" click that, then 'save' button, and when it asks what you wish to do with the file click on the left - Desktop - then the hjt folder then the save button

    when that has downloaded - double click the hjt folder on your desktop ahe the the hijackthis.exe file inside - scan - safe log and copy and paste the notepad file a s a reply here please.

  • 336

    0

    Posted May 24th, 2004 21:00

    Chris,

    Thanks, but the results remain the same.

    Charlieguitar

  • Texruss

    2 Intern

    •

    3447 Posts

    336

    0

    Posted May 25th, 2004 03:00

    Try running Windows System File Checker:

    At Start/Run type:     sfc     /scannow       (space between sfc and /scannow)

    Click OK. You will need your Windows CD if it finds files to fix.

    HTH,

    Texruss

  • Texruss

    2 Intern

    •

    3447 Posts

    347

    0

    Posted May 25th, 2004 05:00

    How do you do the refresher install?

    Version of Windows?

    Texruss

  • 347

    0

    Posted May 25th, 2004 05:00

    Texruss,

    I'll give it a try, that might provide some time to find and remove it before the symptoms appear again.  How do you do the refresher install?Thanks,

    Charlieguitar