Maleware/spyware/virus? overload --Please Help

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by The_TorT, May 25, 2006.

  1. The_TorT

    The_TorT Private E-2

    Hi all,

    I have a LAN network with 2 computers and both are in serious trouble, but I will not overload you all with multible issues... My CPU usage is always high and sometimes my browser freezes and so I have to reboot. I have Windows XP on both PC's and 1G of memory, Intel 4 processors, and 1 G HD space with lots of free space on both machines, so what gives? I use Norton:mad: AV, on both and went through your suggested steps before posting and I am still in trouble, especially on the Dell laptop.

    On my Dell laptop I get a Micro$oft Script error message when I try and download Counterspy, Search and Destroy,... but I will save that for another post. My only question is if something is really bad on my laptop and I have a wireless LAN network can I spread bugs back and forth between machines in the meantime??

    Thanks all,
    I am so glad you are all here for ignorant illiterates like me!
    The Tort
     

    Attached Files:

    The_TorT, May 25, 2006
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Welcome from all of us at MG's .... this forum is a place to get acqaunted and as such, would you copy and paste your query in the malware section ....after reading the "Read this first ....
    We're mnore than happy to help, but you won't get the serious malware attention you need as in the Malware section.:) :) :)
     
    TimW, May 25, 2006
    #2
  3. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi and Welcome

    Please follow our standard cleaning procedures which are necessary for us to provide you support, they cover specific order of running the cleaning applications as HJT is a last resort and mop up program, Also there are steps included for installing, running, and posting HijackThis logs as attachments.


    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis


    When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
    • Bitdefender
    • Panda Scan
    • HijackThis
    .
     
    DavidGP, May 26, 2006
    #3
  4. The_TorT

    The_TorT Private E-2

    Thanks for the head's up on the Maleware post section!

    As for the "Read This First" section on maleware, I was a good boy and did as I was told.:rolleyes: I followed the directions to the letter--but thank you for reminding me to relate just how I faired with the experience/process. Not too good, actualy! I was not able to run any of the scans in, "safe mode", nor was I was able to even download very much of the software to my laptop, and I even bought the Pro vesrions for Counterspy and Panda!

    I thought I had to post here first as a new user...I don't know where I got that stuck in my head? This whole thing has been a bloody nightmare and I am in finals at college and have been spending far too much time with this than with studying and the like.

    Boo whoo, poor me, right? Well, computers are great, but sometimes I wounder just how much time they really save us? Ever since I got hooked on computers I have a lot less free time, my marraige is in the crapper, and I have been getting horrible migranes from staring at my new LCD monitor for 10-12 hours a day! Is there a support group for guys like me? Computer's Anonomous (CA) and I'm not refering to the "C" that was big in the `80's!:p

    Keep on keepin` on all you great peeps! if it weren't for you all i would really be in the crapper with my old lady! She is a student too and I have managed to ruin both machines in my feeble attempts at self education by way of trial and error!

    The TorT
     
    The_TorT, May 26, 2006
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to attach the two requested logs from step 6 of the READ ME and you need to follow the directions in step 7 of the READ ME and install HijackThis properly. You are running it exactly how it was specified not to run it.

    Why couldn't you run all the programs? What happens? You said you could not run in safe mode, so did you run them in normal boot mode?

    You HJT log does not show any signs of malware so whatever problems you are having may not be malware related but we need to see the other logs first before deciding.

    If you are having difficulties running various things and you are getting messages about scripts, you may be blocking things with Symantec AV or your firewall. It is also quite possible that what it slowing your PC down is Symantec.
     
    chaslang, May 27, 2006
    #5
  6. The_TorT

    The_TorT Private E-2

    1ST: I'm sorry! I do not know what I did wrong as far as "running it exactly how it was specified not to run." Not the typical Phi Kappa Phi student hey? Sad, but true--I am closer to a special ED student when it comes to computers. I will go back and reread the instructions ASAP! (I am terrible w/instructions, but I am a hard, devoted pupil and I will try harder in future:eek:

    2ND: I do not know why I could not run all the programs, except some will not download onto my machine--that is my laptop--As far as my desktop goes, (the 1 log I did send) I thought i did run them all--I was pretty sure of it--i will check that too! WHAT IS "NORMAL BOOT MODE? I assumed it to be just regular everyday mode that I am in right now, when you power up your PC, no?

    3RD: My machine runs quickly on this machine, I was just worried that the "Downloader" virus I got + all other problems I'm having w/my laptop may infect my desktop, given I'm on a LAN wireless network. I did turn off the printer & file share features as an extra precaution, because my laptop is REALLY messed up!!! It crashes whenever I try to download S & D, W. Defender, and almost everything else I try whacks out my laptop's OS. I also have a problem w/windows installer & I get a Visual Script Editor from Microsoft. A red pop up message from Norton said that a program, "is25mdg.tmp" with the error message 12029 from winint.dll. is trying to access the Internet. I said "NO" and the download failed. Other times the OS has just froze & I had to reboot.

    The one thing the 2 machines have in common is they both have huge CPU usage, especially the laptop--it is at 100% in idle mode and I have always had.

    Thanks, I will have to see what "other logs" you need. I have since forgotten--sorry!

    Lastly, you were right on about the firewall--I had to disable it before I could download W.D. and others programs and updates. I have since fixed the problem, but as for Symantec, I have had it since I purchased both machines, buying new subscriptions when required, (NO MORE), and have never had this type of problem, AT ALL--but lots of others, don't get me started:rolleyes: . I just do not know what is making my CPU so high in idle mode? I tried quarantining most of the run programs in Oneline Eye & others put to no avail & I am leery about messing around in there when i do not know squat about any of it...

    Thank you SO much for your kind reply:)

    The Tort:confused:
     
    The_TorT, May 27, 2006
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Step 7 of the READ ME requests that hijackthis.exe be put in C:\Program Files\HJT and it specifically requests not to put it in C:\Documents & Settings or on the Desktop which is exactly where you put it.

    Step 6 of the READ ME (and also the procedure Halo gave to you) asks for the two logs from step 6 to be attached.

    When you say you cannot download the programs, do you mean download or do you mean install?

    Yes normal boot mode is just normal boot mode instead of safe mode which is how the READ ME is run.

    You cannot block wininet.dll from having internet access. It is a valid Windows DLL and with it, you basically cannot do very much on the internet. In fact perhaps that is why you cannot download anything and why disabling your firewall helped. You have to be careful when using a firewall that you do not block valid programs.

    What process is using all of the CPU time?
     
    chaslang, May 27, 2006
    #7

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds