Computer Hope

Software => Computer viruses and spyware => Virus and spyware removal => Topic started by: tece on May 05, 2010, 05:39:04 AM

Title: Spyware/Malware Virus
Post by: tece on May 05, 2010, 05:39:04 AM
Hi guys,

I found this forum through google and I hope that it will be my computer's saviour.

My symptoms are the same as in this thread: http://www.computerhope.com/forum/index.php?topic=95177.0.  Last night, I kept getting messages "This application cannot be executed. The file '---.exe' is infected", followed by promtps to use/buy a virus scanning software I've never seen before.  At one stage, I must've had around 30 red balloons in my taskbar.

So... I ran 'rkill', which seemed to stop the malware, and then 'exehelper' afterwards.  Having done this, the problem went away; so I ran an AVG 8.5 virus scan, and there were no flags.  I turned off the computer.

This morning, I rebooted to find the original problem come back (I can't remember whether it was before or after I enabled my wireless).  The original 'rkill' wouldn't open, getting the same "Application cannot be executed" message.  So, I re-downloaded the same file, which ran fine, stopping the malware.  Then re-ran 'exehelper'.  BUT, I am now afraid that there is something more sinister going on.

Reading the other thread, you suggest that any help will be unique; so here I am, starting a new thread (my first post!).

Any help would be MUCH appreciated!  Thanks.

tece
Title: Re: Spyware/Malware Virus
Post by: tece on May 05, 2010, 05:40:36 AM
Incidentally...

-----------------------------------------------------------------------------------------------

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as Viktor on 05/05/2010 at 12:17:12.


Processes terminated by Rkill or while it was running:


C:\Documents and Settings\Viktor\Local Settings\Application Data\fkocdesjc\lyojhfgtssd.exe
C:\Documents and Settings\Viktor\Desktop\rkill(2).scr


Rkill completed on 05/05/2010  at 12:17:15.

-----------------------------------------------------------------------------------------------

exeHelper by Raktor
Build 20100414
Run at 12:35:09 on 05/05/10
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

Title: Re: Spyware/Malware Virus
Post by: Allan on May 05, 2010, 05:40:46 AM
http://www.computerhope.com/forum/index.php/topic,46313.0.html
Title: Re: Spyware/Malware Virus
Post by: tece on May 05, 2010, 05:48:01 AM
http://www.computerhope.com/forum/index.php/topic,46313.0.html

Was just reading this when you posted.  I will follow the guidelines and post the relevant information.
Title: Re: Spyware/Malware Virus
Post by: Dr Jay on May 06, 2010, 07:58:03 AM
Post when ready. I will check them when you have them posted. :)