Solve : Is my PC infected??

1.	Solve : Is my PC infected??
Answer» OK SuperDave that has been done. What do you suggest next? Anyway, I'm no longer receiving the message that I mentioned at the beginning of this post. I've had no further PROBLEMS connecting to the internet. The only thing that's still odd is not being able to click once/twice to access files/programs etc. through the shortcuts on my desktop. Sometimes clicking perhaps 8/9 times will work. Also right clicking and then "OPEN" always works. I've tried 2 different PS/2 mice and one USB and still same problem. One other thing that I wanted to point out is a few of the logs( don't remember which ones now) that we're related to the apps. that you had me download and I saved to my desktop, were completely blank( looked like a blank page.) The only reason that I mention this is; while I was surfing the web looking for answers about not being able to open the shortcuts I came across a site somewhere (don't know if I could ever find it again)that said something to the effect that if you are having problems opening shortcuts and some of the icons on your desktop are blank it's probably a worm. Now perhaps this is total nonsense and I sure trust your knowledge and expertise on malware much,much, more that this, but just thought that I'd mention it. Sure appreciate all your help. naturegurlPlease try deleting one of those shortcuts and create a new one and see if it works.I think my PC might have spyware on it. How do I tell for sure? And how do I remove it?Quote from: SuperDave on February 24, 2011, 07:53:09 PM Please try deleting one of those shortcuts and create a new one and see if it works. Well SuperDave I had tried that several times the other day with no change. Thought that I'd give it another shot tonight and now it appears that the problem now includes more that the desktop. This is new. Most folders /files within Computer/Documents will not open properly now without a lot of coaxing. WOW !!Ok. Let's try this: Please download SREng Extract it to Desktop and double click SREngLdr.EXE to run it Select System Repair from the left pane. Click on File Association Select all entries that has an Error status click [Repair] Refer to this image for an example: In your case, it would be .EXE Close SREng now. .Quote from: SuperDave on February 25, 2011, 12:48:42 PM Ok. Let's try this: Please download SREng Extract it to Desktop and double click SREngLdr.EXE to run it Select System Repair from the left pane. Click on File Association Select all entries that has an Error status click [Repair] Refer to this image for an example: In your case, it would be .EXE Close SREng now. . Hi SuperDave I ran the app. it found one error. "VBS handle the VBS open method (whatever that is )" and I deleted it. Since my last post I have done the following; created a few new desktop icons, ran the app. that you just suggested and I'm now trying another USB mouse. Now perhaps it's just wishful thinking but some files/programs(not necessarily the new ones that I created) seem to now open a little easier. I'm going to check with a colleague about this problem. In the meantime, please try this: Do you have your OS CD/DVD? If so, 1/ Click the Start button. 2/ From the Start Menu, Click All programs FOLLOWED by Accessories. 3/ In the Accessories menu, Right Click on the Command Prompt option. 4/ From the drop down menu that appears, Click on the Run as administrator option. 5/ If you have the User Account Control (UAC) enabled you will be asked for authorisation prior to the command prompt opening. You may simply need to press the Continue button if you are the administrator or insert the administrator password etc. 6/ In the Command Prompt window, type: sfc /scannow and then press Enter. 7/ A message will appear stating that the system scan will begin. 8/ Be patient because the scan may take some time. 9/ If any files require replacing SFC will replace them. You may be asked to insert your Vista DVD for this process to continue. 10/ If everything is okay you should, after the scan, see the following message Windows resource protection did not find any integrity violations. 11/ After the scan has COMPLETED, Close the command prompt window. Quote from: SuperDave on February 25, 2011, 05:08:07 PM I'm going to check with a colleague about this problem. In the meantime, please try this: Do you have your OS CD/DVD? If so, 1/ Click the Start button. 2/ From the Start Menu, Click All programs followed by Accessories. 3/ In the Accessories menu, Right Click on the Command Prompt option. 4/ From the drop down menu that appears, Click on the Run as administrator option. 5/ If you have the User Account Control (UAC) enabled you will be asked for authorisation prior to the command prompt opening. You may simply need to press the Continue button if you are the administrator or insert the administrator password etc. 6/ In the Command Prompt window, type: sfc /scannow and then press Enter. 7/ A message will appear stating that the system scan will begin. 8/ Be patient because the scan may take some time. 9/ If any files require replacing SFC will replace them. You may be asked to insert your Vista DVD for this process to continue. 10/ If everything is okay you should, after the scan, see the following message Windows resource protection did not find any integrity violations. 11/ After the scan has completed, Close the command prompt window. Unfortunately SuperDave all that came with my system is two recovery disks. natregurlHi SuperDave . Well I found the problem (that I was having with opening programs/shortcuts etc.) was caused by (as embarrassing as it is) the mouse double-click speed. Besides everything ELSE I had looked at this several times over the past day or so and thought that it looked OK. All I did was slow it down ever so slightly and the problem appears cured. I certainly have no idea if it was changed,how it was changed or why it required slowing down?? Anyway, very sorry to have put you through this particular problem. So now that this has been overcome, as well as no more corrupted search provider messages, no hanging downloads, no further internet connection problems, is there any other things that you would have me check. My PC now seems to be running great now and I'm wondering if you think my PC is clean? Thanks so much.Quote So now that this has been overcome, as well as no more corrupted search provider messages, no hanging downloads, no further internet connection problems, is there any other things that you would have me check. My PC now seems to be running great now and I'm wondering if you think my PC is clean? Thanks so much. That is good news. I was thinking that it was not infection related. Judging by all the scans we ran, I would say that your computer is clean. Let's do some cleanup. To uninstall ComboFix Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane. In the field, type in ComboFix /uninstall (Note: Make sure there's a space between the word ComboFix and the forward-slash.) Then, press Enter, or click OK. This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore. ************************************************** Clean out your temporary internet files and temp files. Download TFC by OldTimer to your desktop. Double-click TFC.exe to run it. Note: If you are running on Vista, right-click on the file and choose Run As Administrator TFC** will close all programs when run, so make sure you have saved all your work before you begin. * Click the Start button to begin the cleaning process. * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. * Please let TFC run uninterrupted until it is finished. Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning. ****************************************** Looking over your log it seems you don't have any evidence of a third party firewall. Firewalls protect against hackers and malicious intruders. You need to download a free firewall from one of these reliable vendors. Remember only install ONE firewall 1) Comodo Personal Firewall (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" and uncheck any HopSurf and/or Ask.com options if you choose this one) 2) Online Armor 3) Agnitum Outpost 4) PC Tools Firewall Plus If you are using the built-in Windows XP firewall, it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to "phone home" for more instructions. Simply put, Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time. ****************************************************** Use the Secunia Software Inspector to check for out of date software. •Click Start Now •Check the box next to Enable thorough system inspection. •Click Start** •Allow the scan to finish and scroll down to see if any updates are needed. •Update anything listed. . ---------- Go to Microsoft Windows Update and get all critical updates. ---------- I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you INTERACT with a risky website. It's easy and it's free. SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox. * Using SpywareBlaster to protect your computer from Spyware and Malware * If you don't know what ActiveX controls are, see here Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future. Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly. Safe Surfing! Well SuperDave, I followed your instructions re; last post, and I sincerely appreciate all of your help. I feel very fortunate that you were there to help me and I'm also very confident that all the other CH members that you have helped feel the way that I do. Thank you very much and God Bless. naturegurlYou're welcome. I will lock this thread. If you need it re-opened, please send me a pm.

Answer»

OK SuperDave that has been done. What do you suggest next?
Anyway, I'm no longer receiving the message that I mentioned at the beginning of this post. I've had no further PROBLEMS connecting to the internet. The only thing that's still odd is not being able to click once/twice to access files/programs etc. through the shortcuts on my desktop. Sometimes clicking perhaps 8/9 times will work. Also right clicking and then "OPEN" always works. I've tried 2 different PS/2 mice and one USB and still same problem. One other thing that I wanted to point out is a few of the logs( don't remember which ones now) that we're related to the apps. that you had me download and I saved to my desktop, were completely blank( looked like a blank page.) The only reason that I mention this is; while I was surfing the web looking for answers about not being able to open the shortcuts I came across a site somewhere (don't know if I could ever find it again)that said something to the effect that if you are having problems opening shortcuts and some of the icons on your desktop are blank it's probably a worm. Now perhaps this is total nonsense and I sure trust your knowledge and expertise on malware much,much, more that this, but just thought that I'd mention it. Sure appreciate all your help. naturegurlPlease try deleting one of those shortcuts and create a new one and see if it works.I think my PC might have spyware on it. How do I tell for sure? And how do I remove it?Quote from: SuperDave on February 24, 2011, 07:53:09 PM

Please try deleting one of those shortcuts and create a new one and see if it works.

Well SuperDave I had tried that several times the other day with no change. Thought that I'd give it another shot tonight and now it appears that the problem now includes more that the desktop. This is new. Most folders /files within Computer/Documents will not open properly now without a lot of coaxing. WOW !!Ok. Let's try this:

Please download SREng

Extract it to Desktop and double click SREngLdr.EXE to run it
Select System Repair from the left pane.
Click on File Association
Select all entries that has an Error status click [Repair]
Refer to this image for an example:

In your case, it would be .EXE
Close SREng now.

.Quote from: SuperDave on February 25, 2011, 12:48:42 PM

Ok. Let's try this:

Please download SREng
Extract it to Desktop and double click SREngLdr.EXE to run it
Select System Repair from the left pane.
Click on File Association
Select all entries that has an Error status click [Repair]
Refer to this image for an example:

In your case, it would be .EXE
Close SREng now.
.

Hi SuperDave I ran the app. it found one error. "VBS handle the VBS open method (whatever that is )" and I deleted it. Since my last post I have done the following; created a few new desktop icons, ran the app. that you just suggested and I'm now trying another USB mouse. Now perhaps it's just wishful thinking but some files/programs(not necessarily the new ones that I created) seem to now open a little easier.

I'm going to check with a colleague about this problem. In the meantime, please try this:

Do you have your OS CD/DVD?

If so,

1/ Click the Start button.

2/ From the Start Menu, Click All programs FOLLOWED by Accessories.

3/ In the Accessories menu, Right Click on the Command Prompt option.

4/ From the drop down menu that appears, Click on the Run as administrator option.

5/ If you have the User Account Control (UAC) enabled you will be asked for authorisation prior to the command prompt opening. You may simply need to press the Continue button if you are the administrator or insert the administrator password etc.

6/ In the Command Prompt window, type: sfc /scannow and then press Enter.

7/ A message will appear stating that the system scan will begin.

8/ Be patient because the scan may take some time.

9/ If any files require replacing SFC will replace them. You may be asked to insert your Vista DVD for this process to continue.

10/ If everything is okay you should, after the scan, see the following message Windows resource protection did not find any integrity violations.

11/ After the scan has COMPLETED, Close the command prompt window.
Quote from: SuperDave on February 25, 2011, 05:08:07 PM

I'm going to check with a colleague about this problem. In the meantime, please try this:

Do you have your OS CD/DVD?

If so,

1/ Click the Start button.

2/ From the Start Menu, Click All programs followed by Accessories.

3/ In the Accessories menu, Right Click on the Command Prompt option.

4/ From the drop down menu that appears, Click on the Run as administrator option.

5/ If you have the User Account Control (UAC) enabled you will be asked for authorisation prior to the command prompt opening. You may simply need to press the Continue button if you are the administrator or insert the administrator password etc.

6/ In the Command Prompt window, type: sfc /scannow and then press Enter.

7/ A message will appear stating that the system scan will begin.

8/ Be patient because the scan may take some time.

9/ If any files require replacing SFC will replace them. You may be asked to insert your Vista DVD for this process to continue.

10/ If everything is okay you should, after the scan, see the following message Windows resource protection did not find any integrity violations.

11/ After the scan has completed, Close the command prompt window.

Unfortunately SuperDave all that came with my system is two recovery disks. natregurlHi SuperDave . Well I found the problem (that I was having with opening programs/shortcuts etc.) was caused by (as embarrassing as it is) the mouse double-click speed. Besides everything ELSE I had looked at this several times over the past day or so and thought that it looked OK. All I did was slow it down ever so slightly and the problem appears cured. I certainly have no idea if it was changed,how it was changed or why it required slowing down?? Anyway, very sorry to have put you through this particular problem. So now that this has been overcome, as well as no more corrupted search provider messages, no hanging downloads, no further internet connection problems, is there any other things that you would have me check. My PC now seems to be running great now and I'm wondering if you think my PC is clean? Thanks so much.Quote

So now that this has been overcome, as well as no more corrupted search provider messages, no hanging downloads, no further internet connection problems, is there any other things that you would have me check. My PC now seems to be running great now and I'm wondering if you think my PC is clean? Thanks so much.

That is good news. I was thinking that it was not infection related. Judging by all the scans we ran, I would say that your computer is clean. Let's do some cleanup.

To uninstall ComboFix

Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane.
In the field, type in ComboFix /uninstall

(Note: Make sure there's a space between the word ComboFix and the forward-slash.)

Then, press Enter, or click OK.
This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore.

****************************************************
Clean out your temporary internet files and temp files.

Download TFC by OldTimer to your desktop.

Double-click TFC.exe to run it.

Note: If you are running on Vista, right-click on the file and choose Run As Administrator

TFC will close all programs when run, so make sure you have saved all your work before you begin.

* Click the Start button to begin the cleaning process.
* Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
* Please let TFC run uninterrupted until it is finished.

Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
********************************************
Looking over your log it seems you don't have any evidence of a third party firewall.

Firewalls protect against hackers and malicious intruders. You need to download a free firewall from one of these reliable vendors.

Remember only install ONE firewall

1) Comodo Personal Firewall (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" and uncheck any HopSurf and/or Ask.com options if you choose this one)
2) Online Armor
3) Agnitum Outpost
4) PC Tools Firewall Plus

If you are using the built-in Windows XP firewall, it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to "phone home" for more instructions. Simply put, Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time.
**********************************************************
Use the Secunia Software Inspector to check for out of date software.

•Click Start Now

•Check the box next to Enable thorough system inspection.

•Click Start

•Allow the scan to finish and scroll down to see if any updates are needed.
•Update anything listed.
.
----------

Go to Microsoft Windows Update and get all critical updates.

----------

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you INTERACT with a risky website. It's easy and it's free.

SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!
Well SuperDave, I followed your instructions re; last post, and I sincerely appreciate all of your help. I feel very fortunate that you were there to help me and I'm also very confident that all the other CH members that you have helped feel the way that I do.
Thank you very much and God Bless. naturegurlYou're welcome. I will lock this thread. If you need it re-opened, please send me a pm.

Solve : Is my PC infected??

Discussion

No Comment Found

Related InterviewSolutions

Reply to Comment