[dk10111]

I have recently started having the following problem, please forgive me if I get the terminology wrong, I don't know much about this stuff: On booting up, opening outlook, internet explorer or pretty much any program I get a black box with "C:\WINDOWS\system32\cmd.exe" popping up.

This is followed by a second box headed "CTF Loader has encountered a problem and needs to close. We are sorry for the inconvenience."

These keep popping up each time I open something new, even a new window for explorer.
I've also now had a file "Bleh.exe" start appearing on my desktop.
I've run Panda Activescan, AVG and Spybot S&D (which keeps picking up bloodhound.pack even after it's been fixed) and after running them, and cleaning up anything found, I still have the problems.

What can I do that's not too complicated?

[Advertisements]

Sometimes bugs become part of the system restore set so get replaced after removal.

Turn off system restore then use an online scan to see how it does, if you can run it rebooot then re-run and turn system restore on if all clear.

http://www.pandasoft...n_principal.htm

The bleh.exe is probably best dealt with using Hijack This, run the latest version and post the log to the malware section of these forums

http://www.tomcoyote.org/hjt/

Edited by Keith, 20 May 2005 - 04:19 AM.

[Retired Tech]

Sometimes bugs become part of the system restore set so get replaced after removal.

Turn off system restore then use an online scan to see how it does, if you can run it rebooot then re-run and turn system restore on if all clear.

http://www.pandasoft...n_principal.htm

The bleh.exe is probably best dealt with using Hijack This, run the latest version and post the log to the malware section of these forums

http://www.tomcoyote.org/hjt/

Edited by Keith, 20 May 2005 - 04:19 AM.

[dk10111]

Thanks Keith

I've tried both, The first keeps picking up Gaobot.gen which keep coming back when deleted or disinfected. No-one has replied to my log post unfortunately so still in the same boat.

[Retired Tech]

Try here

http://securityrespo...moval.tool.html

[dk10111]

Thanks...tried it, still not picking anything up.