Security warning: your computer may be infected...

NZ Scythe · Oct 21, 2007

Hi, I recently tried searching for a crack for a stupid little game for my girlfriend... I am now paying the price and seem to have been infected with a number of viruses.

The first is the little green/red icon in the bottom right of my task bar that says: "securt warning: your computer may be infected with harmful or unwanted software" if you click close it does a number of things other than fix the problem...

I am also getting a pop up window that says: "Data Execution Prevention - Microsoft Windows" ... To help protect your computer, Windows has closed this program... Name: Run DLL as an APP... I don't know if this is a genuine microsoft message or not?

I am also unable to install a new game I just purchased (world of warcraft) when I double click on the install.exe the install screen pops up for a few seconds then just dissappears. (This is what made me realise I had some sort of virus)

I also have a problem with some application taking focus off this internet explorer window (whis makes typing this message very frustrating!)

The problem seemed real bad before, I was also getting a "C:\windows\sdrive error" and the computer would just restart after a couple of minutes... after a bit of browsing on the net I found the VundoFix.exe application, which when run, found a dll file and was able to remove that problem.. it has alo spead up the computer but I still seem to have numerous infections.

Please Help? I don't know much about these sort of things but I have seen people ask for hijackthis logs.. I downloaded hijack this and run a scan, but I can't even open notepad to copy the text into this post! I've tried attaching it tho...

Can someone please help me? I really don't want to have to waste a full day reinstalling xp and loading all my applications from scratch.

abri · Oct 21, 2007

Hi NC Scythe!
Welcome to Major Geeks. Please run the following scan and then follow the instructions in the box below. Your computer is still infected and Hijack This is not adequate to show all the different infections. After you've finished the Combofix scan and the others which follow, please post the logs to us. Be sure to install HijackThis in the proper place and rename it as requested. Thanks!

Run this utility:

1. Download this file - Combo Fix
2. Double click combofix.exe & follow the prompts.
Note: Do not mouseclick combofix's window while it is running. That may cause it to stall.
3. When finished, it will produce a log for you. Attach this log to your next reply.
Click to expand...

After you've run Combofix, please follow the instructions and links in the box below!

Welcome to Majorgeeks!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

If, after doing ALL of the above, you still have a problem, make sure you have booted to normal mode and run the steps in Downloading, Installing, and Running HijackThis taking care to install it as per the instructions to the proper folder and to properly rename the hijackthis.exe file to analyse.exe. This is very important due to some new infections going around!

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy (this one must be saved by you)

(AVG Antispyware log) – this one ONLY IF you were not able to run CounterSpy

Bitdefender – from step 6

activescan.txt – from the Panda scan from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

hijackthis.txt – the log from the analyse.exe scan – (HijackThis has to be renamed and be in the proper folder – read the instructions!)

NOTE:You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!
Click to expand...

abri

Log in or Sign up

Security warning: your computer may be infected...

NZ Scythe Private E-2

Attached Files:

hijackthis.log

abri MajorGeek