major flood problem. please help

dre66 · Jan 17, 2007

after downloading a keygen for my friend and scanning the winRAR with norton i opened it and executed the .exe ... (big mistake... norton did not have "scan within compressed files" turned on)
although i succesfully deleted all the exes contained in the winRAR my computer has fallen victim to a flood problem. somewhere i believe a process is constantly sending emails from my computer. the problem is that although norton picks these up and stops them it is still flooding my CPU... CCAPP.exe, which i believe is the norton exe that deals with mail filtering, takes up a significat portion of my CPU and my memory. Constant messages from norton and popups make me fear that i will soon lose it and end up reformatting, but i'd rather not. idealy i have to find the source of these emails and quarantine/delete it. i will attach some screenshots to help in understanding the problem. i am really stumped on this one.
cheers,
andrei

http://www.freeimagehosting.net/image.php?b04e1854cf.jpg
http://www.freeimagehosting.net/image.php?bd0fea3c5f.jpg
http://www.freeimagehosting.net/image.php?9a569ab7d3.jpg

TimW · Jan 17, 2007

Welcome to Majorgeeks!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis
Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy

AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

Log in or Sign up

major flood problem. please help

dre66 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member