Do's when infected with a virus
Do's:
- Retrace your step's when did the computer function properly, what did you do before everything went haywire
- Update your virusscanner, if you didn't do so allready, and perform a full systemscan, if you can't boot normally, try booting in safe-mode (you can access your scanner via start->all programs, some scanners aren't loaded in safemode so you cannot access them via the taskbar)
- Also boot into safe-mode if your scanner cannot clean/delete the infected file
- Do not fully rely on your own virusscanner. Let one, or more, online scans, determine if you are really infected, when they report you're infected try searching for a removal tool on this site (the menu to the right)
- Perform the tasks below in 'normal' mode
- Download all updates for windows at the windows update site restart when asked and keep checking for updates untill no more updates are available
- Download both Spybot Search and Destroy and Ad-Aware. Update both programs and let them perform a full system scan and repair all problems
- Download Coolweb-shredder run the program and choose fix
- Restart your computer
- When the programs report you as totally clean but the problem keeps appearing you can make a HijackthisLog (option: do a system scan and save a logfle) and place the logfile on the forum of this site or one of the other forums mentioned at the links section. I, or someone else, wil analyze the log and help you get rid of the virus, if you really have one
- After your system is cleaned take a look at the articles on this site so you can prevent an infection in the future
Make a HJTlog so we can solve your problem:
- Show hidden files and folders(XP):
- On the Tools menu in Windows Explorer, click Folder Options.
- Click the View tab.
- Under Hidden files and folders, click Show hidden files and folders.
- If you see a warning message, click Yes.
- Click Apply.
- Click OK.
- Show hidden files and folders(98/2000/ME):
- Double-click the My Computer icon
- Click on the View menu, click Folder Options
- Advanced Settings box, under the "Hidden files" folder, click Show all files.
- If you see a warning message, click Yes.
- Click Apply.
- Click OK.
- Download both Spybot Search and Destroy and Ad-Aware. Update both programs and let them perform a full system scan and repair all problems
- Download Coolweb-shredder run the program and choose fix
- Download and run Ccleaner
- Download, install and run Ewido
- Download and run hijackthis (scan and save a logfile)
- Post the logfiles of Ewido and HJT here in the HJT section (you need to register first)