Unable to perfrom Run & Read Me First...

smorgan · Nov 30, 2007

Hello. I'm in desperate need of computer help. I think on sunday the 25th we got a virus. Since then I've had countless Trojans and today finally found what my PC-Cillin said was the virus. It was in C:WINDOWS\mgrs.exe and installed it self on 11/25/07.
I finally got the file deleted but I'm still having my pages hijacked and when I tried to download the programs in the Run and Read Me First thread, the page gets hijacked. It is like the stupid thing KNOWS I'm trying to get rid of it. Normally it redirects me to dnsserror or s2fnew. If it makes a difference, the only way I was able to get rid of the infected file was to restart in Safe Mode and delete that way. I am running Windows XP on a Dell Dimension B110
I have run the PC-Cillin with my ethernet disconnected. Any help would be much appreciated as I've been told that I need to wipe my harddrive clean and reinstall everything. Thank you in advance for any help that you can give.

Sherry

chaslang · Nov 30, 2007

Welcome to Major Geeks!

It is rarely necessary to reinstall. It sometimes just takes a little creativity to figure out how to get around blocking issues. With that in mind, try the below types of ideas to help you get us some logs requested in the READ & RUN ME

try downloading using a differnet browser if you have another installed

try downloading in safe mode

try downloading tools to another PC and then copy them to the problem PC using a CD, a flashdrive,.....etc

If you could at a minimum, just get the MGtools.exe file onto your problem PC and run it per the instructions and then attach the MGlogs.zip file. This would help us get started.

C:WINDOWS\mgrs.exe has nothing to do with PC Cillin so I'm not sure why you say PC Cillin was the virus.

Log in or Sign up

Unable to perfrom Run & Read Me First...

smorgan Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member