C:\WINDOWS\TEMP\0.exe

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Matt16, Nov 29, 2011.

  1. Matt16

    Matt16 Private E-2

    I have had a redirecting virus for a very long time. After days of forum surfing and posting threads on tons of sites.. None have ever helped or even responded. I just said " **** IT! " So for the past 2 months + I have had a redirecting virus on my Desktop , and my wireless laptop. About an hour ago Avast pops up saying " You are opening an application that may be potentially unsafe. "
    File: C:\WINDOWS\TEMP\0.exe
    Origin: http://netdhc.com/1129c/0.rar
    Opened by: C:WINDOWS\system32\Rpcqt.dll

    I had just gotten on my computer to charge my Ipod, and I dident open anything but iTunes.. I was then searching on the internet for an hour plus looking on how to fix it. I came up with Nothing.. :cry
    I am 110% Sure the same virus is on my desktop and laptop scince i cant get on the same sites.. An example = Ebay.com
    When my Computer is redirecting i tend to see google anslyst or something along the lines of that.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  3. Matt16

    Matt16 Private E-2

    MBR Found something! Im happy because that means im that much closer to being fixed :-D AHH! I found Viewpoint Media Player installed!
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to continue on with the instructions in the Read and Run Mr First link.
     
  5. Matt16

    Matt16 Private E-2

    Im Very Very sorry it took me this long to reply! I hope its not to late. A quick update im not getting redirected anymore, and thought the issue was solved. Too my surprise certain sites are blocked. Like i said before, im not able to get onto certain sites an example would be ebay. The error is = "This webpage is not available" " Error 105 (net::ERR_NAME_NOT_RESOLVED): Unable to resolve the server's DNS address." And i attached the files you asked for.
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You still did not complete the instructions. You need to run the rest of the last step. Right after running MBRcheck it tells you to run the READ & RUN ME FIRST.

    Also you messed up when you ran TDSSkiller. You should not have quarantine the unsigned drivers. You were told to ignore these. You deleted files you need. You need to attempt to unquarantine these.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds