Thread: Need help with a virus or something

Yes.

Why do you also have Avira installed? It's not good to have 2 anti-viruses running like you've got going.

Eh, nevermind. Confused anti-spyware with antivirus.

This is why I don't mix gaming with browsing or media. I have my gaming rig, my lappy for browsing, and the Media PC for my movies and music. I friggin hate viruses.

Originally Posted by HeavyG

This is why I don't mix gaming with browsing or media. I have my gaming rig, my lappy for browsing, and the Media PC for my movies and music. I friggin hate viruses.

Ok, Mr. Moneybags...

I just go find it's file name and location on c drive and delete it then run registry scan to get rid of any left overs. (do this in safe mode as it may be running in background and won't allow deletion in normal mode)

Civil,

Try looking through the list of malware here and see if you can find the one that's affecting you: Malwarebytes Forum -> Malware Removal Guides and Self Help Guides

Then follow the detailed instructions to remove it.

If you can't find it, try to get a screen shot of the popup you mentioned.

I didn't see anything overtly wrong with your hijackthis log. Most of the stuff there was Windows or legit programs. I'd try first booting into safe mode and running scans. If it still finds nothing, I'd highly recommend getting Darik's Boot and Nuke: Darik's Boot And Nuke | Hard Drive Disk Wipe and Data Clearing and securely formatting the drive and reinstalling. My guess is you likely got hit by a drive-by virus browsing legit sites. So many vulnerabilities in browser plugins here lately. It's the #1 attack vector in PCs. Can't recommend enough running a program like PSI from Secunia to scan for out of date software on your PC.

Civil,

Most of these fake AV sites are loaded from dlls stored in your appdata folder's root. Or under the registry under HKCU\software\microsoft\windows\currentversion\run look and see what starts up there.

Chances are that this is linked to your user profile. You can just create a new profile, migrate your data, and then delete the old profile...

Originally Posted by Guyver

Ok, Mr. Moneybags...

Even so, my lappy hardly ever gets "infected". I guess it really depends on what you are doing and what you are downloading.