could this be a virus

Discussion in 'Malware Help (A Specialist Will Reply)' started by jcdgl, Apr 6, 2008.

  1. jcdgl

    jcdgl Private First Class

    I downloaded a trial version of a game and my AVG picked up something so I canceled the download and put what ever it was in the AVG Vault. Everthing seemed fine but shortly after that the active X screen kept popping up on the screen even when internet explorer was not open. I though this strange to I ran Spybot search and destroy and came up with only 2 item. Then I ran CC Clean. It stopped. Now I have notice that when I go to open a program like PAINT it says that I should shut down some programs (even if nothing else is open)and try again because there is not enough memory. Do you think some thing could be running in the background that I can't see?
     
    jcdgl, Apr 6, 2008
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    TimW, Apr 6, 2008
    #2
  3. jcdgl

    jcdgl Private First Class

    Thank you for your reply. I have printed out the first two steps and will begin workinig on them when I get home from work tonite. Even though I am not afraid of computers I still go slowly and follow all steps so it may take me just a little bit of time to complete this. I have used major geeks before and you have always been great to work with:)
     
    jcdgl, Apr 7, 2008
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    That's good to know ...let me know if you have any problems with the instructions. :)
     
    TimW, Apr 7, 2008
    #4
  5. jcdgl

    jcdgl Private First Class

    question ? I have started the clean up on computer.Can you help me with 2 items that I can not find enough info on to delete oribital from hewlett packard last used 2004 ( i guess that can gorolleyesbut not sure )and tradewinds same thing last used 2004...
     
    jcdgl, Apr 9, 2008
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Minor issues that we can handle later...just run the scans and attach the logs. :)
     
    TimW, Apr 9, 2008
    #6
  7. jcdgl

    jcdgl Private First Class

    sorry you have not heard from me we are having some minor family issues and I have not had the time to concentrate on the computer I will try my best this week
     
    jcdgl, Apr 14, 2008
    #7
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Not a problem ....:)
     
    TimW, Apr 14, 2008
    #8
  9. jcdgl

    jcdgl Private First Class

    have finished sunjava and set msconfig to normal next i need to empty quarantine files ...does this mean the files that are in the vault? I use AVG 7.5
     
    jcdgl, Apr 14, 2008
    #9
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If you can .....it just cuts down on the garbage in your logs. :)
     
    TimW, Apr 14, 2008
    #10
  11. jcdgl

    jcdgl Private First Class

    yes AVG lets you delete what is in the vault. I am just afraid of letting those little guys loose;).I will work on this hopefully tonite
     
    jcdgl, Apr 15, 2008
    #11
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Attach the logs when you are ready. :)
     
    TimW, Apr 15, 2008
    #12
  13. jcdgl

    jcdgl Private First Class

    jcdgl, Apr 15, 2008
    #13
  14. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Still need the logs from ComboFix, MalwareBytes and the MGLogs.zip from running the MGTools.exe.
     
    TimW, Apr 15, 2008
    #14
  15. jcdgl

    jcdgl Private First Class

    First scan took almost 1 hour then dinner and stuff so I will work on the rest tonite and send all at once. Thank you for being so patient
     
    jcdgl, Apr 16, 2008
    #15
  16. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Not a problem.
     
    TimW, Apr 16, 2008
    #16
  17. jcdgl

    jcdgl Private First Class

    WOW There was alot more stuff then I though on computer..I hope I get all the logs sent right
    View attachment MGlogs.zip View attachment combofixlog.txt

    View attachment mbam-log-4-16-2008 (19-26-05).txt
    I did run into spyware guard warning me that something was trying to change homepage (internet explorer) and i did not accept...I hope that was ok..everything seems to be normal..I do not like the new internet explorer because of the active X program and my husband hates it to so we were using netscape but have now switched to Mozilla Fox..My husband likes the old internet explorer without the tabs and without activex will it hurt to go back to an older version for him when we are done with all the clean up stuff
    :)
     
    jcdgl, Apr 16, 2008
    #17
  18. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Your logs look clean.....however:
    Why is this here:
    C:\users ??

    Use windows explorer to find and delete:
    C:\Program Files\temp01

    Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Now use add/remove programs to uninstall:
    Java 2 Runtime Environment, SE v1.4.1_02

    Tell me if you are having any other issues.
     
    TimW, Apr 16, 2008
    #18
  19. jcdgl

    jcdgl Private First Class

    Good morning.. I have completed all instructions . Computer seems fine but two things. In my ad a removelist is the game cradles of rome (the one i messed up and got the virus or what ever it was from) It will not let me remove it. Says that in can not find install log. CC Cleaner will not remove it either. Also paint still says I need to close down programs to run it
     
    jcdgl, Apr 18, 2008
    #19
  20. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Try reinstalling it...from a download at a different site...then see if it will uninstall completely. I'm not sure that was the cause......
     
    TimW, Apr 18, 2008
    #20
  21. jcdgl

    jcdgl Private First Class

    mgtools has set my internal clock to military time how do i get it back
     
    jcdgl, Apr 19, 2008
    #21
  22. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Go to the control panel ...regional and lang. .....customize ....Time ...and reset it to h:mm;ss;tt
     
    TimW, Apr 19, 2008
    #22
  23. jcdgl

    jcdgl Private First Class

    when i started having the problem with the game (that i WAS addicted to ) i tried to download form lime wire..my son warned me to be careful but however this time the adult did not listen.. that was the last place i downloaded the game...everthing except paint is working fine ...i do not use it much so it is not a problem..was just trying to make sure it would not infect anything else.... Time is fixed thank you;):)
     
    jcdgl, Apr 19, 2008
    #23
  24. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Always a good idea to scan downloads before installing or opening....you may wish to post in the software forum about the Paint issue....good luck. :)
     
    TimW, Apr 19, 2008
    #24
  25. jcdgl

    jcdgl Private First Class

    thank you
     
    jcdgl, Apr 23, 2008
    #25
  26. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are welcome ...safe surfing. :)
     
    TimW, Apr 23, 2008
    #26

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds