FRIHOST FORUMS SEARCH FAQ TOS BLOGS COMPETITIONS
You are invited to Log in or Register a free Frihost Account!


Is this an virus ????





dude_xyx
OS - Windows XP SP3

Everytime after I select show hidden files option in folder options, it change back to hidden again.


Also sites loading terribly slow. I think I have an virus or something in my PC but NOD32 haven't detected anything.
Cliffer
yeah,maybe virus. it's better to re-install OS. some anti-virus softs can't kill virus completely.
Marcuzzo
yep mostlikely a trojan.
before formatting and reinstalling, try this.

boot in safe mode ( keep Hitting F8 when booting ) and select Safe mode.

check the registry for startup items ( in the currentVersion/Run[Once] keys )
check the autoexec.bat and system.ini if any programms are started.
check win.ini for "run="-codes

also run a scan with a trojan remover/scanner like TDS-3 or BOClean.

source (dutch) : http://nl.wikipedia.org/wiki/Trojaans_paard_%28computers%29
Nemesis234
malware bytes it the best program i have ever used if i get hit by virus.

run safe mode with internet
download - update - scan all in safe mode.

once done boot normal and type msconfig in run, look at boot, remove anything suspicious, if that dont work, re-install time.
dude_xyx
Thanks guys.

I did install BOClean and now net works fine. But hidden file problem is still there.
mukesh
i think virus problum.

one time complete formate hard disk and put a good antivirus.
jilbs
Don't format your PC. its probable a virus and there's a possibility that you got it from inserting an infected USB. I have a suggestion.

donwload and run combofix. combofix is a hijack-this type of virus/malware removal.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

just read the instruction and you will get that virus removed on your PC.

Good luck and tell us if it is successful.
Fire Boar
jilbs wrote:
Don't format your PC. its probable a virus


If it's a virus, formatting is usually the best option. If it's not a virus, formatting is again probably the best option if you can't find what's wrong.
jilbs
Fire Boar wrote:
jilbs wrote:
Don't format your PC. its probable a virus


If it's a virus, formatting is usually the best option. If it's not a virus, formatting is again probably the best option if you can't find what's wrong.


i agree, however there is always a way, format the PC if the virus is coded on the CMOS. but for this type of virus i think formating the PC should be the last but not the best option. viruses are loaded once the computer started along with startup files and other DLLs, fonts, startup parameters etc.

if there is a way to identify those processes, there should be a way to kill them and prevent them from coming back.

he can try few things like. taking out the Hard Drive and have it deep scanned to another PC. in most cases step solves the problem. also try disabling unrelated startup items in MSConfig maybe the process causing the problem is found there.
Marcuzzo
jilbs wrote:
format the PC if the virus is coded on the CMOS


there is no point in formatting if there is CMOS virus
jilbs
Marcuzzo wrote:
jilbs wrote:
format the PC if the virus is coded on the CMOS


there is no point in formatting if there is CMOS virus


i agree, i missed that one out. Very Happy, i was wrong Very Happy it should not be there
dude_xyx
Formatting is out of question at the moment. I have 3 HDD fitted into this PC. Getting a full data backup is bit of a problem.


Thanks jilbs, I'm going to check combofix.

Thanks for help everyone ! I try to see the topic updated.

Still I'n having this hidden file problem.
jilbs
did it work or it did not?
mOrpheuS
dude_xyx wrote:
Everytime after I select show hidden files option in folder options, it change back to hidden again.

Navigate to the following path in Regedit, and toggle the value of the key "CheckedValue" manually (1 to 0 and vice versa) -

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL

Then change the setting from the "Folder Options" dialog box again.

Here's a link to XP default folder settings registry export (use at your own risk) - http://www.kellys-korner-xp.com/regs_edits/viewfolderrestore.reg
ProfessorY91
Fire Boar wrote:
jilbs wrote:
Don't format your PC. its probable a virus


If it's a virus, formatting is usually the best option. If it's not a virus, formatting is again probably the best option if you can't find what's wrong.


As always, Fire Boar with the excellent sense.

Its time for a boot and reinstall. If you've performed several antivirus software scans with well known antivirus programs you're not going to kill it. A smart enough malicious program could keep you from viewing hidden files and add the hidden file attribute to all of its working files, keeping you from finding out that your system is infected.
FunDa
Quote:

Navigate to the following path in Regedit, and toggle the value of the key "CheckedValue" and "DefaultValue" manually to 1
(The virus/worm/trojan would have changed it to 0)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL


This is exactly what should be done. But don't close regedit.
Then wait a few seconds and refresh regedit and see if the value remains at 1. If it goes back to 0, a worm is active and changing it back. Use process explorer or a similar good task manager software to kill the active programs one by one and check if the worm is still active. (Also, kill and restart explorer as it can also have a dll worm loaded over it)
Related topics
Anti Virus
Virus says - Pay me or else ....
Taiwan- China or U.S.
can a virus cause unrecoverable damage to HD?
Michael Jackson 'Suicide' virus spreads
What to do when you get a virus
What is the best antivirus progrem?
HOW TO ENSURE THAT VIRUS DOES NOT SPREAD THRU YOUR ADDRESSBk
Stupid MSN virus
Windows Vista Virus!!
Computer Virus Types
Is Windows a virus?
porn virus
Protect your pc from new virus programs..
[Official] Security: Anti-Spyware/Virus, & Firewall
Reply to topic    Frihost Forum Index -> Computers -> Computer Problems and Support

FRIHOST HOME | FAQ | TOS | ABOUT US | CONTACT US | SITE MAP
© 2005-2011 Frihost, forums powered by phpBB.