Solve : Need help...computer is infected?

1.	Solve : Need help...computer is infected?
Answer» I noticed odd behavior ever since I let someone use my computer the other day. Now I cannot access my drives as well as a few other things are acting wierd. When I double on a any drive letter I get the message C:\resycled\boot.com is not a valid Win 32 application. My first clue was the spelling of rescyled? This happens with any drive, including my external. My first question before I scan & attach the logs is...Do I just scan C drive or all my HD's ? I have 2-250 Gig drives, 1-500 Gig & 1TB external that is alway hooked up. Windows XP, SP3 Please help...this is very fustrating. ThanksManaged to fix it myself.What did you do?Used regedit to find & delete all "boot.com" files. Then I opened the hidden files & deleted all "resycled folders" & .ini files on every hard drive. Then I disabled system RESTORE (as it would not let me do a restore to any previous point). Rebooted computer and ran every scan I have... Avira, Spybot, Ad-Aware, Spyware Blaster & Malwarebytes. It came up clean, so I re-enabled system restore and so far everything seems normal. Took a fair bit of time & hurt my eyes after while, but everything is working great so far. Now I know better, when someone else WANTS to use my computer!! Just say No! Thanks for asking.I'm sure we could have helped you too.....but as long as it works now. Quote Then I opened the hidden files & deleted all "resycled folders" & .ini files on every hard drive. .ini files? Do all programs work NORMALLY?Yes everything is working normally, so far. I made sure not to delete the .ini file that belonged to my external HD. The other ones didn't belong in the other drives...they weren't there before all this. Google was a big help with that. If anything acts funny I will post my logs just to be sure. Thanks Carbon.All right then.

Answer»

I noticed odd behavior ever since I let someone use my computer the other day. Now I cannot access my drives as well as a few other things are acting wierd. When I double on a any drive letter I get the message
C:\resycled\boot.com is not a valid Win 32 application. My first clue was the spelling of rescyled? This happens with any drive, including my external. My first question before I scan & attach the logs is...Do I just scan C drive or all my HD's ? I have 2-250 Gig drives, 1-500 Gig & 1TB external that is alway hooked up.
Windows XP, SP3
Please help...this is very fustrating.
ThanksManaged to fix it myself.What did you do?Used regedit to find & delete all "boot.com" files. Then I opened the hidden files & deleted all "resycled folders" & .ini files on every hard drive. Then I disabled system RESTORE (as it would not let me do a restore to any previous point). Rebooted computer and ran every scan I have... Avira, Spybot, Ad-Aware, Spyware Blaster & Malwarebytes. It came up clean, so I re-enabled system restore and so far everything seems normal. Took a fair bit of time & hurt my eyes after while, but everything is working great so far.
Now I know better, when someone else WANTS to use my computer!! Just say No!

Thanks for asking.I'm sure we could have helped you too.....but as long as it works now.

Quote

Then I opened the hidden files & deleted all "resycled folders" & .ini files on every hard drive.

.ini files? Do all programs work NORMALLY?Yes everything is working normally, so far. I made sure not to delete the .ini file that belonged to my external HD. The other ones didn't belong in the other drives...they weren't there before all this. Google was a big help with that. If anything acts funny I will post my logs just to be sure.

Thanks Carbon.All right then.

Solve : Need help...computer is infected?

Discussion

No Comment Found

Related InterviewSolutions

Reply to Comment