Other > Viruses and worms
at a loss to find the virus -- SOLVED!!!
theladyupstairs:
good morning mrreg. thanks for your help. i opened msconfig & scanned the list. the only suspicious thing i could recognize was "ACDAEMON" a program file in common files, only because sometimes a program called DAEMON takes a long time to close when i shut down. but then, within a few seconds, i got a notice "genuine host process for win32 services encountered a problem & has to shut down." i shut it down immediately. i'm not eager to go back, & anyway, i don't really know what might look strange.
david had asked me to give the addresses of some of the web pages that popped up unrequested. last night i went on the atkins website - about diet - and this one popped up: hxxp://www.shopica.com/search.php?q=Diet&txn=3480-8A818E92. (as requested i changed the t's into x's.) i checked this website at nortons website checker & it came up "safe."
so, another day has begun & i don't know what to expect, but i'll get back if anything does. meanwhile, i'd love to hear your or david's ideas.
thank you!
DavidR:
I don't know why this would be running in msconfig, startup items as these tools aren't in normal use and it may be they are being exploited.
Try this limited analysis tool and we can see if there are any unusual entries:
- Useful as a diagnostic tool - FileHippo Download - HiJackThis and post the contents of the HJT log file here. - HJT Information HiJackThis Tutorial.
Download and run HJT and post the contents of the log file (cut and paste or attach the log file, see ### below and image) into this topic, you may need to split it over two or more posts depending on how large it is.
###
- When you click the Reply button, there is an Additional Options link, this expands the options to attach a file, that can be an image file or a text file (.log or .txt). Also see How to post an Image.
theladyupstairs:
good morning david! thanks for sticking with me. i just looked at the tutorial, but haven't started to download anything yet. when i do, do you suggest i "do a system scan & save a log file?" the warning scares me, but i trust you won't tell me to do anything beyond my (limited) capacity. as i understand, hjt will only scan & not delete or do anything to files. is that correct? thanks.
theladyupstairs:
p.s i went to the link you gave - do you want me to download "latest version of 1.34 mb" there are other links on the page so i'm not sure. thanks.
mrreg:
hijackthis has 2 versions, they say the easy one is the installed version. and yes, it will not delete anything, i think, only log them.
did u try ad aware pro yet, they have a free version, it's very good. :)
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version