Virus Issue.

apmadhav · Feb 28, 2009

Hi Mates,
I am new to this post. I have a real serious concern here.My laptop is affected with virus
When i go to Start -> Run->cmd
it is displaying as C:\Documents And Settings\TEMP instead of displaying the C:\Documents And Settings\Local Settings\<user name>. Also i could see that there are 0 kb files that are being generated in that C:\Documents And Settings\TEMP folder.

I have tried to take my system back to one restore point but that also did not help me.
The system was saying as the System Restore cannot be done.

I have tried deleting the files and folders in
Start - Run - %temp%.
Start - Run - Temp

I have not done changes in setting so that the system should actually point to to the TEMP folder.

Please throw some light in this regards. My work has been halted here and is impacting my job position here.

I would be very great ful and it would be of greatest help to me .

chaslang · Mar 2, 2009

Welcome to Major Geeks!

The default folder for a command prompt window is:

C:\Documents and Settings\<user name>

Your problem may not be due to malware, the best way to find out is for you to run the cleaning procedure further down, but first I suggest that you just check to see if the Environment Variable for your user name is set properly. Right click My Computer and select Properties, then the Advanced tab, and then click the Environment button. Find the variable for your user account and see what it is set to. It should be what I gave above.

MALWARE CLEANING PROCEDURE

Please follow the instructions in the READ & RUN ME FIRST link given futher down and attach the requested logs when you finish these instructions.

If you have problems where no tools seem to run, please try following the steps given in the below and then continue on no matter what you find. You only need to try the TDSSserv steps if having problems getting scans in the Read & Run Me First.

TDSSserv Non-Plug & Play Driver Disable

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

READ & RUN ME FIRST. Malware Removal Guide

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware, Malwarebytes and Spybot ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

Log in or Sign up

Virus Issue.

apmadhav Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member