Help - I think I have something nasty on my laptop

**hugomax** · 03-11-09, 07:18 AM

Post #2

I foolishly downloaded an application from a website that I should have no better for. I ran the exe and got immediately sus when it wanted me to reboot before the app would work. I think there might have been some changes to my registry.

I checked my McAfee security suit and found a mystery app which had the same install date and time had given itself full access to the net. I deleted it. My security level had also been dropped down in the minimum level. The suit has a spyware component but nothing has triggered. I have done a full scan and nothing has come up.

However my laptop seems to be more laboured while I am on the net. My gut feel is that I have not got rid of the problem. I tried going through the permission but there which I have no idea what they are used for.

Can you have some words of advise on how to confirm if I have a problem and if so how to fix it. I am getting dead paranoid using the laptop now.

Thank you all

hugomax

**Woodstock** · 03-11-09, 07:30 AM

malwarebytes.org will find and fix if there anything ..

**spectech** · 08-11-09, 12:52 AM

Try this, here is a link for free antivirus rescue discs,

just boot up with a disc created from the downloaded iso. the discs are live cds, do update before scanning. More info is found on the web site.

**Mokilok** · 14-12-09, 12:02 AM

The guys above gave some good suggestions. if that doesnt work and your forced to find and remove the file manually, they often are in the startup folder within the start menu but most are more clever then that. WINDOWS KEY+R > MSCONFIG > STARTUP TAB
look for supicious names in this list that you dont recogniseand goggle them for virus confirmation. untick the suss .exe and go to the directory that is associated with it. SHIFT + DELETE the files manually. once again WINDOWS KEY+R > REGEDIT >
the two folder you want are HKEY_LOCAL_MACHINE > SOFTWARE > MICROSOFT > WINDOWS > CURRENTVERSION > RUN
AND
HKEY_LOCAL_MACHINE > SOFTWARE > MICROSOFT > WINDOWS > CURRENTVERSION > RUN ONCE
delete suss exe's from those two folder and virus's should no longer restore themselves apon boot virus scanner should clean up the rest.

**Aboulaly** · 14-12-09, 12:09 AM

I can give you a 100% fix to your problem mate, that would guarantee you piece of mind and full cure.

Format your laptop

**trev78** · 14-12-09, 12:15 AM

Originally Posted by Mokilok

The guys above gave some good suggestions. if that doesnt work and your forced to find and remove the file manually. they often are in the started folder within the start menu but most are more clever then that. WINDOWS KEY+R > MSCONFIG > STARTUP TAB
look for supicious names in this list that you dont recogniseand goggle them for virus confirmation. untick the suss .exe and go to the directory that is associated with it. SHIFT + DELETE the files manually. once again WINDOWS KEY+R > REGEDIT >
the two folder you want are HKEY_LOCAL_MACHINE > SOFTWARE > MICROSOFT > WINDOWS > CURRENTVERSION > RUN
AND
HKEY_LOCAL_MACHINE > SOFTWARE > MICROSOFT > WINDOWS > CURRENTVERSION > RUN ONCE
delete suss exe's from those two folder and virus's should no longer restore themselves apon boot virus scanner should clean up the rest.

do exactly as mokilok said
then if that don't work do what aboulaly said

**Dishnit** · 14-12-09, 12:35 AM

Originally Posted by Aboulaly

I can give you a 100% fix to your problem mate, that would guarantee you piece of mind and full cure.

Format your laptop

Wise Words. That will be the best solution if you had a copy of the important programs on your computer such as m/s office,myob ect! ect!

it would be a good idea to back-up the files of these programs. that way you can view these files @ a later stage when you have got the original program.

run a virus scan on these files on an another system if possible BEFORE you install it into the newly formatted system.

**z1gg33** · 14-12-09, 01:24 PM

Originally Posted by Mokilok

. WINDOWS KEY+R > MSCONFIG > STARTUP TAB

I totally forgot about msconfig.

everyone should run it to have a look at whats going on, I did, and found that its was loading Nvidia Desktop manager, which upon a quick google indicates that its a bit of a memory hog and unnecessary ..

might be worth other having a quick look at msconfig.

Sorry OP , OT

**rob916** · 14-12-09, 04:25 PM

Use your taskmanager and check for resource hogs.
The use hijackthis to remove the crap.
Maybe post a pic of your taskmanager processes.

**z1gg33** · 14-12-09, 06:11 PM

Originally Posted by rob916

Use your taskmanager and check for resource hogs.
The use hijackthis to remove the crap.
Maybe post a pic of your taskmanager processes.

cheers Rob916.

Yeah Taskmanager loads at boot time for me. I did run hijackthis and it did detect it. And it much better than MSCONFIG

**galen** · 16-12-09, 08:57 AM

Hi hugomax, you might also want to try

Then click on 'Continue to Symantec Security Check' and click 'Virus Dectection'.

**rob916** · 16-12-09, 01:34 PM

Originally Posted by galen

Hi hugomax, you might also want to try

Then click on 'Continue to Symantec Security Check' and click 'Virus Dectection'.

I would seriously think twice before allowing ANY norton/symantec product to fugg things up.

**galen** · 16-12-09, 01:54 PM

Why is it so rob?

**rob916** · 16-12-09, 02:12 PM

A very good question galen.

The mentioned products are very poor performers when it comes to detecting virus, they are also very resource hungry.
I get PC's in here EVERY day full of spyware/malware and virus that have these so called Antivirus suites on them, it really is a joke. The really terrible thing is that ppl do NOT know they are infected and are lulled into a false sense of security. Porn and Personal Antivirus popups are not normal.

I swear by Kaspersky Internet Security, because I know that if I put it on a customers computer they won't be back with a infected computer next week. I am in the business of making money, this means happy customers and not phone calls a week later saying my computer is invaded with porn popups and I didn't fix it properly.

Just my 2 bobs worth.

**anyone** · 16-12-09, 03:47 PM

i agree rob i seen plenty of pc with n0rt0ns on infected

**galen** · 16-12-09, 11:00 PM

Ok, I see the point rob. I had recommended it because it has solved my problem twice in the past. Anyway I actually running KIS 2010 as well. Happy with it.

**baseel** · 16-12-09, 11:23 PM

Have you tried system restore? I would give it a go first

**Aboulaly** · 17-12-09, 12:43 AM

It's good to see all the inputs and different opinions and suggestions, but I would like to repeat my self ( sorry guys) by the time that he is gonna waste to try and scan his computer with different antivirus software over and over, he would have done a format and clean install in 40-60 minutes with a guarantee to get rid of the offending virus and any other problems, I personally reckon you should take all the precautions to secure your computer before you get a virus, but once you get a nasty one, a format is the way.