My computer has been infected with several malicious items and I have tried hard to remove them using AdAware, Spybot S&D and my regular antivirus Avast Home Edition which is updated daily, all to no avail. The symptoms I have noticed (since this morning when my system hung up while installing Quick Heal antivirus software) are as follows:
Internet Explorer (6.0.2900) pops up unrequested with a random url (mostly adult and dating sites based in Hong Kong/Japan/China).
Avast Home Edition routinely displays an alert on the lines of ‘blocked access to malicous site http://www…’ However, IE continues to run randomly.
Avast also frequently displays notification of catching viruses (mainly trojans) in the System32, Temp Int Files folders. I keep deleting but the instances of the same files keep coming back. One of them is A001.exe in the System32 folder.
Address field and the buttons ‘Use blank’, ‘Use current’ are grayed out in IE Internet options menu.
I am using a broadband internet connection and a few times I got ‘unresolved’ error while accessing any site. Ping is normal at these times. Curiously, when I did a traceroute and found Google’s local IP and then typed it in the browser, Internet access began working normally.
Spybot S&D found several problems, all of which I fixed. But the above continue.
HiJack this showed a suspicious file in Fonts folder that keeps coming back after I fix it. I also found 2 services that are running by the file 'C:\WINDOWS\clfile.exe" which I was able to disable but not remove.
first of all unistall all the spybot search and destroy, quick heal, and all other security products you have other than avast and then install malwarebytes antimalware (mbam) get the free version from here: malwarebytes.org and run an update and perform full scan of your system. before running full scan, disable system restore option. and please post your hijack log here.
edit : since viruses are found by avast in the system32 folder then when you do a scan using mbam, it will possibly remove all those files. your system may go down… be careful!! (not possible to run windows again unless you install or repair the windows installation)
you can also consider superantispyware(sas). dont worry about the tracking cookies it reports… let sas deal… no need to close the thread and it cannot be closed by you.
aur kuch log is forum mein hain jo better solutions desakthey hein… thoda aur samay thak rehna… better solutions milsakthey hein…
agar phir se computer mein problem hua to vaapas aana…