help with virus

[chevytrucknut]

I'm over on my girlfriends computer and have a BIG problem. I've never seen this kind of virus before.

If I try to open a folder, such as my computer, windows explorer, search, control panel....anything, it doesn't work. explorer.exe cuts out (the thing that runs all windows stuff) and then might come back.

So all I can do is run the internet, Avast, Ewido, Spybot S & D, CCLeaner, and the internet, because these are on the Start Menu. I would run HijackThis, but it's not under my start menu.

I also (as stated earlier) can't open My computer to look for this virus. I've also tried looking in Task manager for bad stuff and disabling some things from the startup (in msconfig).

Lastly, I tried to run it in Safe Mode. Well the virus apparently can get through there too. Can't open anything, and it's just a black screen.

PLEASE help me! Thanks

 

[baronvongogo]

you said you got into msconfig? so the start-->run works?

If so use the browse button and search for hijackthis and see if it will run that way, if it does run a scan and post a log.

I would also advise running all of these steps although you cant access safe mode so normal mode will have too do:

CLEANING COMPUTER OF TROJANS, SPYWARE AND VIRUSES
redALL THE FOLLOWING SOFTWARE IN THIS GUIDE IS FREE

STEP 1. Clear the system restore points (if you donÂ’t want to do this move onto the next step but be aware viruses can infect system restores and can come back or still cause problems):
• Click Start >> Run - type SYSDM.CPL & press Enter
• Select the System Restore Tab
• Tick on the checkbox - "Turn off System Restore on all drives"
• Click Apply
• Then untick the same checkbox & click OK
• This deletes ALL restore points that had the infection and creates a clean one

STEP 2. Proceed to try these spyware cleaners and rootkit finders in safe mode and full system scans (To get into safe mode reset the pc then keep pressing F8 until a menu appears in which you can select safe mode some computers use F5, F6 or F7 to get the menu up).

Ad aware SE:
http://www.download.com/Ad-Aware-SE...045910.html?part=dl-ad-aware&subj=dl&tag=top5

Ad Aware VX2 add on (To run this tool once Adaware is updated click on Add-ons in the lefthand column. Select VX2 Cleaner V2.0 and click Run Tool. Click "OK"):
http://www.lavasoft.de/software/addons/vx2cleaner.shtml

Spybot:
http://www.safer-networking.org/en/mirrors/index.html

Advanced Spyware Remover:
http://www.majorgeeks.com/Advanced_...over_d4977.html

Windows Defender Beta 2 (need real copy of windows to work)
http://www.microsoft.com/downloads/...&displaylang=en

CWshredder(removes some browser hijackers):
http://www.intermute.com/spysubtract/cwshredder_download.html

Blacklight (rootkit remover)
http://www.f-secure.com/blacklight/try.shtml

Vundofix
http://www.majorgeeks.com/download4954.html

STEP 3. Run online scans from the following (they may not clean your system but can give an idea of whatÂ’s infecting you):

ewido:
http://www.ewido.net/en/onlinescan/

trend micro:
http://housecall.trendmicro.com/

STEP 4. Run STEP 6at this point then uninstall your virus scanner and install each one of these and run a full system scan. Make sure to uninstall each one after its finished and run them in safe mode.

AVG:
http://free.grisoft.com/doc/2/lng/us/tpl/v5

Avast:
http://www.avast.com/eng/download-avast-home.html

Antivir:
http://www.free-av.com/

Bit Defender:
http://www.bitdefender.com/bd/site/products.php?p_id=24

STEP 5.
To clear the Java cache follow these steps (if java is installed):
1. From the Start button, click Settings > Control Panel
2. In the Control Panel, open the "Java Plug-in Control Panel"
3. Select the Cache Tab
4. Click the Clear button inside the Cache Tab, which will clear your JRE cache directory

STEP 6. Download this program to clean your temp files and registry:

CCleaner
http://www.ccleaner.com/ccdownload.asp

STEP 7. Download [/b]hijackthis and post a log in the forum:
http://www.majorgeeks.com/download3155.html

 

[chevytrucknut]

baronvongogo,

Actually, I was only able to access Run by hitting Ctrl + Alt + Del then going to new task. I didn't know there was a Browse though, thanks! I'll check that and see if I can find something.