Tag Info

Hot answers tagged

14

I know you said that you tried deleting the shortname of the file and it didn't work for you, but it does work for some forms of this problem. It worked for me. So for the sake of completeness I am mentioning it here. Step by step: press windows key + r type cmd.exe, press enter cd \to\the\folder\containing\the\problem\file dir /x Note the short filename ...


10

I think I've found the answer: this YouTube video says that on some computers, F8 brings up the "Select boot device" menu that I described above, and if that happens, to hit Esc then keep hitting F8 until the Advanced Boot Options screen appears. I'll give it a go. Update First attempt failed: it just booted normally. On second attempt, I tapped the F8 ...


10

Never trust removal tools to get rid of a virus, trust them to tell you have a virus, wipe the drive, re-install the OS, re-install your programs, and restore your data from backups. However if you would prefer to use a virus removal tool, try Comodo Cleaning Essentials, or Comodo Rescue Disc (which is a bootable version of Comodo Cleaning Essentials). It's ...


9

4 Useful Tools To Detect And Remove A Potential Botnet If you get more enterprising, checkout the Darknet schemes A more focused blacklist method is given by OpenDNS too. If it is Conficker you want to check, start with this quick EyeChart test


7

Try the DelinvFile tool. It worked for me perfectly when NOTHING worked before. BR, galmeida


6

I would recommend three tools for determining if your system is part of a botnet. The sysinternals tool suite is a must have for this process. The three tools listed below are the ones you will use for this process. Process Explorer, TCPView Filemon The first step is to run TCPView to see if you are talking to any strange addresses across the web. You ...


5

Boot into a Linux live CD environment and delete it with NTFS-3G?


5

Check DNS settings on the router, modem and other devices. Also consider a factory reset, rather than just a reboot - the reset will completely clear all settings. If you are using default (ISP-assigned) DNS servers, consider changing them to an alternative, such as Google's 8.8.8.8 - if you observe this behaviour stopping, consider checking with other ...


5

I'm pretty sure I know what's going on, and it's Spybot that did it to you (sort of). Spybot put entries in your Hosts file, but removed the usual default localhost entry (or it is missing for some other reason). "007guard.com" happens to be alphabetically first, so it was inserted at the top of the list. When a process does a reverse lookup for the ...


4

It might be the case that another program (like your antivirus, CCleaner, or some other anti-malware app you've used) already deleted the files but left the Registry keys behind. It might also be the case that the malware relocated itself one or more times while trying to evade detection, or created decoy registry keys. I've had good luck with MalwareBytes; ...


4

Disable these under safe mode: R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file) O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll BHO: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (file missing) O3 - Toolbar: ALOT ...


4

Long story short, you cannot use a guest account for that, best solution is use a USB dvd drive, boot from a Kaspersky rescue disk to clean the PC of malware. Or remove the hard drive and connect it to another PC using a USB adapter, clean it that way.


3

More than likely, that site is little more than a turnkey affiliate site for StopZilla (the tool it recommends you download and install to remove the malware.) StopZilla is one of the more shady and untrustworthy of the non-rogue anti-malware applications out there. You'd be much better off with Malwarebytes Antimalware, SuperAntiSpyware, or just about ...


3

Yes. Here is a link to the patch/fix. Just download and run. Here is the manual method: Click Start, Run and type command Type the following commands one by one: cd\windows regedit If Registry Editor opens successfully, then navigate to the following key: HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command Double-click the ...


3

A noble but misguided endeavor. I used to keep up with the latest techniques for this, but that's not really best practice anymore. Once a system is infected with malware, you just can't trust it again. The right thing to do is back up what data you can, clean that data in a safe environment, and then rebuild the system from scratch (format the drive and ...


3

Can you locate the executable? If so, boot into a linux LiveCD and blast it off the face of your filesystem. It may well recreate itself, if it's got hidden agents hiding around, so grab a copy of Autoruns and check what's loading behind your back. edit: And have you checked your Hosts file? C:\WINDOWS\SYSTEM32\DRIVERS\ETC That's where Pre-DNS level ...


3

There was an in-depth discussion on the topping at Slashdot yesterday - How Can I Tell If My Computer Is Part of a Botnet?


3

I had the same problem with all of my browsers: IE, Firefox, and Chrome. Ads would rise up in the lower left and lower right hand corners of my browser window (box or cellphone shape) on random sites. I scanned my computer unsuccessfully with malwarebytes (free), microsoft malicious software removal tool (free), and mcafee (enterprise). nothing was ...


3

It sounds like you may still be infected by the rootkit! Your updated information and the diagnostics made by the other community members in the Comments tell me that "incongruous results = something amiss". I strongly suspect that you are getting these extremely "strange" results because whatever damage the rootkit dealt is still present -- either it is ...


3

You are correct to assume that no malware scan finds all malware... but there ARE sites that multi-test programs. http://dexpot.en.lo4d.com/virus-malware-tests has tested Dexpot May5 2014 (2 days ago as of this post) and found it is clean from 27 different tests.


2

Use Autoruns for Windows to search for nengine.dll or Newnext.me in the Everything tab, and delete all the entries that you find. For good measures, search carefully also for nengine or Newnext. Reboot to verify if you were successful in eradicating it. Once the problem is fixed, scan your computer with anti-malware software, because very often this adware ...


2

Take a look at Kaspersky Rescue Disk. It allows you to boot your computer into an anti-virus environment, allowing you to scan and clean your computer without booting up Windows. Kaspersky Rescue Disk 10 is designed to scan and disinfect x86 and x64-compatible computers that have been infected. The application should be used when the infection is so ...


2

"Adware" is the term that I think best applies. There are various Internet Explorer and Firefox add ons/toolbars that cause this type of behavior. Frequently they piggyback on installers of free programs. Oftentimes you can decline to install the toolbar or addon by unchecking a checkbox, other times the installer gives you no choice but to include the ...


2

Explanation What you described is a part of a known PHP backdoor. The main PHP code is obscured by base64 encoding so that it is not so easily detectable. The code you showed is normally hidden in the Exif header Model and another important part (PCRE /.*/e) is normally in the header Make. The code from Exif gets executed by another part of the backdoor - ...


2

Instead of copy the explorer.exe from another computer use the computers own cached version from c:\WINDOWS\System32\DllCache. You will not be able to do this when running Windows on that computer. You could do one of the two following things: Boot up the computer from some Linux Live CD (or a Windows PE environment) and overwrite the file. Put the ...


2

Yes, as long as the live CD you use has software on it capable of finding and removing whatever specific malware you've caught - check to make sure you've got up to date virus definition files, for example. Or you could boot to a live CD and download something then, while it's running (but obviously would have to re-download every time you boot). Or get any ...


2

It is usually advisable to run a number of on -demand malware scanners as they seem to pick up different items from each other. MalwareBytes and Spybot Search And Destroy are the ones I usually run. Run full scans with them both to see if they can collectively delete whateveris on the PC. Additionally, do you have access to another PC that you can attach ...


2

svchost and COM surrogate are both necessary for the functioning of Windows. It sounds like you've got a dying hard disk so now would be a good time to back everything up that's important! If you think you've got a virus then have a look at Microsoft Security Essentials as it picks up most things and is one most people have heard of. You should be able to ...


2

Isn't there a special character in the name of the directory? Like an "empty" character that looks like a space but is not a space? Have you tried a "Check Disk", as the directory entry for that directory or its parent might be corrupted?


2

Ah ha!!! I did it!!! This was so annoying but after several hours... it dawned on me. Basically, you make a folder with the same name as the missing folder, then you drag the folder into the folder with the missing folder. Windows did not ask me to combine the folders, but after that, Windows knows where the folder is and you can delete it. I didn't try to ...



Only top voted, non community-wiki answers of a minimum length are eligible