Malware question? (Virus, trojans, spyware, etc)

[Major Attitude]

If you have an issue with malware, you will be asked to complete our removal guide. Here is that guide. After completing it, please post a new thread in malware if your problem is not solved:


[*]Try these tips first for slow PC issues: How to Make Your Computer Run Like New in 4 Easy Steps[*]If they do not resolve your problems, continue on to the below malware removal procedures.[/LIST]Before you start the full cleaning procedure, if you already know the name of which virus (trojan, worm, or other malware) is infecting your computer, you may want to first check to see if your problem is covered in the below link:

Special Removal Procedures

If it is then try that procedure first and come back here to the READ & RUN ME if necessary afterwards.


*** IMPORTANT NOTES - READ THESE ***

• Do not use Multiple Antivirus Applications or Software Firewalls
  • Antivirus: If you have multiple antivirus applications installed on your PC, please choose the one you prefer and uninstall all others. Do this now before continuing because you will only be asked to do it later if not done now. This does not mean online scanners. It is only referring to full antivirus applications like McAfee, Symantec, AVG, Avast, AntiVir, Kaspersky, etc.
  • Firewall: Only use one software firewall. Running multiple software firewalls is unnecessary and using more than one software firewall on the same connection could cause issues with connectivity to the Internet or other unexpected behavior including excessive use of system resources which will slow down overall PC performance.
• Please DO NOT post HJT logs before running these standard cleaning procedures. This is not a HijackThis log reading forum. It is a Malware Removal forum.
• Also please DO NOT post any logs directly inline with your message.
  • See this: HOW TO: Attach Items To Your Post

• Please do not cheat by skipping any steps.You are only hurting yourself and you will waste more time in the long run.
• Do not send private messages to any of the helpers! These private messages will be ignored and deleted.

1: House Cleaning & Setup

• Uninstalling malware programs - Work thru the below link to uninstall any bad stuff that should not be installed on your PC. This may in some instances even resolve your problems. It takes a small amount of time (based on your exerience level) to do this comparison, but it well worth the effort.
  • Uninstall Malware via Add/Remove Programs

• Msconfig must be set for Normal Startup mode - You MUST be sure that MSconfig is not being used to control Startups. Note: That some Window's OSs (like Win 2K, 2003) do not have MSconfig! Run the procedure in the below link for your Windows version:
  • Use MSconfig to setup for Normal Startup Mode

• Empty ALL Quarantine type folders for antivirus and antispyware applications.
  • This step of house cleaning may save a load of time later (reduced scanning time) and can significantly reduce the size of logs being posted later. Here is just one example for doing this with Norton/Symantec:
    • Removing files from Norton AntiVirus Quarantine

• Empty your Recycle Bin

• Empty Norton Nprotect folder - If you are a Symantec/Norton user make sure you empty their Norton Nprotect folder guarding the Recycle Bin.
  • See Emptying the Norton Protected Recycle Bin

• Download and install CCleaner
  • Now run Ccleaner with the default options (that means don’t change anything) to clean out temporary files.
  • Only use the default settings on the Windows Tab and select Run Cleaner. Do not run any other options from other tabs.
  • Also it is highly recommended to login to all other User Accounts on the PC including the Administrator account (on Win2K,XP and Vista) which will only show when you boot in safe mode.
    • Run CCleaner on each account. This can greatly reduce scan time and log sizes from the later scanning you will do below.
    • If you don’t see Ccleaner’s link when logging into the other accounts, just goto the C:\Program Files\Ccleaner folder and double click on the ccleaner.exe file to run it. You can also create a shortcut to the file on the Desktop of your other user accounts to make it easier to run in the future.

2: Enable viewing of hidden files, system files and file extensions

• Some programs hide themselves by making their files invisible in normal Windows settings. Run the steps in the below link (has steps for ALL Win OS's) to make them easier to find.
  • How to view hidden, system files & folders!

• Not doing this would allow file extensions commonly used by trojans and spyware to be hidden, for example a file ending in .exe or dll making manually finding it, if needed, difficult to impossible.

3: Procedures based on your Windows Operating System

• If you have Windows 95, 98, or ME, continue here: Windows 98 and ME Cleaning Procedure

• If you have Windows 2000 or 2003 continue here: Win 2000 & 2003 Cleaning Procedure

• If you have Windows XP, continue here:Windows XP Cleaning Procedure

• If you have Vista, continue here: Vista Cleaning Procedure