hno:
Download Hijackthis.
Run a scan and save a log file.
Copy the log file to this website:
http://www.hijackthis.de/
Should clear your CPU of malicious adware/spyware.
There's also several free programs to download.
http://download.cnet.com/windows/spyware-removers/?tag=mncol;sort&rpp=10&sort=
Run a scan and save a log file.
Copy the log file to this website:
http://www.hijackthis.de/
Should clear your CPU of malicious adware/spyware.
There's also several free programs to download.
http://download.cnet.com/windows/spyware-removers/?tag=mncol;sort&rpp=10&sort=
Just yesterday I got some kind of virus here at the RX. Just browsing around like normal I got a pop up from AVG which never happens aboujt a virus. Since last night I haven't been able to get rid of it. So far I've tried CCcleaner, AVG, MalwareBytes, and ComboFix and nothing worked . Which was discouraging as ComboFix has always worked in the past.
The symptoms:
-iexplorer.exe is always open in the the task manager under the username "system" and is usally active. This has to be the main problem. If I try to end the task it reappears in no time. It's there even when IE isn't running. Normally when using IE it is under username "owner" which still happens when I actually open IE. But the one under system is still there.
-the volume on my computer is totally off. Doesn't matter what program there is no sound at all.
-keep getting the pop up box even when offline about "Internet explorer is not the default etc etc"
-when trying to run some programs last night, like Holdemmanager and Full Tilt I kept getting fake virus alerts which I ignored.
If anybody recognizes this let me know in the meantime I'm gonna download Hijackthis, adaware, and spybot.
The symptoms:
-iexplorer.exe is always open in the the task manager under the username "system" and is usally active. This has to be the main problem. If I try to end the task it reappears in no time. It's there even when IE isn't running. Normally when using IE it is under username "owner" which still happens when I actually open IE. But the one under system is still there.
-the volume on my computer is totally off. Doesn't matter what program there is no sound at all.
-keep getting the pop up box even when offline about "Internet explorer is not the default etc etc"
-when trying to run some programs last night, like Holdemmanager and Full Tilt I kept getting fake virus alerts which I ignored.
If anybody recognizes this let me know in the meantime I'm gonna download Hijackthis, adaware, and spybot.
Use this it's better than CCleaner etc.
http://www.eset.com/online-scanner
http://www.eset.com/online-scanner
After I ran hijackthis. These two things popped up that i took note of in the log file.
C:\System Volume Information\Microsoft\services.exe
C:\System Volume Information\Microsoft\smss.exe
with the synopsis of :
This entry is not running from the System32 folder, so it is probably nasty.
Possibly nasty! According to our database this process runs normally in c:\windows\system32\! Check if you know this process and arrange a viruscheck where required. This process is not running from the System32 folder as it is supposed to be.
This would make some sense to me since my volume isn't working. I just have no idea how to access of fix that problm, any advice?
C:\System Volume Information\Microsoft\services.exe
C:\System Volume Information\Microsoft\smss.exe
with the synopsis of :
This entry is not running from the System32 folder, so it is probably nasty.
Possibly nasty! According to our database this process runs normally in c:\windows\system32\! Check if you know this process and arrange a viruscheck where required. This process is not running from the System32 folder as it is supposed to be.
This would make some sense to me since my volume isn't working. I just have no idea how to access of fix that problm, any advice?
After logging in here and running ESET scan I found out I now have this 144 infected files
http://www.microsoft.com/security/p...try.aspx?Name=TrojanDownloader:Win32/Unruy.G+
http://www.microsoft.com/security/p...try.aspx?Name=TrojanDownloader:Win32/Unruy.G+
I went away for an hour when I came home there was a message (scam of course) from those fuckers saying malicious software has been found scan your system (using their system of course). These are the ones where you have a tough time "x-ing" out..anyways I x'd out and then could not access internet. Ran a Symantec complete scan then rebooted. Got the blue screen during booting saying start up error etc etc..took into the shop but sounds like a virus right?
Just yesterday I got some kind of virus here at the RX. Just browsing around like normal I got a pop up from AVG which never happens aboujt a virus. Since last night I haven't been able to get rid of it. So far I've tried CCcleaner, AVG, MalwareBytes, and ComboFix and nothing worked . Which was discouraging as ComboFix has always worked in the past.
this was the exact message I had (sorry I did not realize what you said) beofre the blue screen of death. There has to be a nasty virus going around.
guys this is what i got as well, and had the exact thing that one of th guys said before about my volume being turned down each time i reboot.....also the blue screen about logon process, and all issues started with IE messing up....it would be running even though i wasnt on it, but couldnt see it or find it, would just click....when i actually tried to load it, no dice.....i am having my whole OS reinstalled by a friend of mine, we couldnt get around it any other way....hopfully you guys find a way...but def something going around
Official Announcement from Rx Tech Support regarding the alert.
Official Announcement:
On the morning of June 17, 2010, RX personnel and users reported an error when visiting the forums that the site was unsafe. This error was generated by the Smart Screen Filter (SSF) built into Internet Explorer and some Anti-Virus applications. The SSF and other AV applications scan a website to verify that there is no malicious code embedded within site and scans for URL’s in the site code for unsafe links. When these applications scanned the forum, a line of code in the header was flagged as unsafe. The specific code related to advertising services no longer in use by The RX and was removed by The RX webmaster. Once the offending line of code was removed, the errors ceased.
At no time was The RX Forum compromised and did not pose a threat to those visiting the site. Additionally, support has confirmed that the forum has not been listed as an unsafe site with Microsoft SSF dynamic listings. We apologize for any misunderstandings and inconvenience that this incident may have caused and always appreciate your continued participation in our forum.
Sincerely,
RX Tech Support
Official Announcement:
On the morning of June 17, 2010, RX personnel and users reported an error when visiting the forums that the site was unsafe. This error was generated by the Smart Screen Filter (SSF) built into Internet Explorer and some Anti-Virus applications. The SSF and other AV applications scan a website to verify that there is no malicious code embedded within site and scans for URL’s in the site code for unsafe links. When these applications scanned the forum, a line of code in the header was flagged as unsafe. The specific code related to advertising services no longer in use by The RX and was removed by The RX webmaster. Once the offending line of code was removed, the errors ceased.
At no time was The RX Forum compromised and did not pose a threat to those visiting the site. Additionally, support has confirmed that the forum has not been listed as an unsafe site with Microsoft SSF dynamic listings. We apologize for any misunderstandings and inconvenience that this incident may have caused and always appreciate your continued participation in our forum.
Sincerely,
RX Tech Support
