[mozzer11]

Hi
I have this weird problem which is hard to explain but i'll try.

Occasionally weird things happen and my computer stop responding normally, including:

Task Manager does not work when I do ctrl alt delete...."The application has failed to initialize properly"
OR
Sometimes when I press ctrl alt delete "Windows Security" window comes up with options lock computer, log off, task manager etc (I press task manager here, nothing)

Shortcuts acting weird, eg firefox with "Bad Image" "The application or DLL is not a valid Windows image. Please check this against your installation diskette".

When I click other shortcuts I get "(null) is not a valid win32 application".

When I double click some items on the desktop IE the recycle bin, they don't open but disappear. Sometimes I can't open folders but if I can, the items in the folder have text and icons missing.

"Start" text on the start button disappears.

When I click shutdown the old style menu comes up with "what do you want the computer to do".

I have no idea why it's doing this!

[Advertisements]

Smells like possible Malware to me. Start here: http://www.geekstogo...cleaning-guide/

[SpywareDr]

Smells like possible Malware to me. Start here: http://www.geekstogo...cleaning-guide/

[mozzer11]

Ok, thanks.
Should I make a new thread or post the OTL log here?

[123Runner]

Make a new thread in the malware forum.
We do not read the OTL logs here.

[Salagubang]

Hi mozzer,

Thats all you need to do. Congratulations.

Lets wrap up.

We need to remove all the tools that you have used.
This is so that should you ever be re-infected, you will download updated versions. It will also remove the quarantined Malware from your computer.

Remove ComboFix

• Click the Start button
• Click Run...
• Type Combofix /Uninstall in the run dialog box and click OK

Remove Other Tools

• Download OTC to your desktop and run it
• Click CleanUp! to begin the cleanup process and remove our tools, including this application
• You may be asked to reboot the machine to finish the cleanup process - if so, choose Yes

Clean Temporary Files

• Download TFC to your desktop
• Open the file and close any other windows
• It will close all programs itself when run - make sure to let it run uninterrupted
• Click the Start button to begin the process - the program should not take long to finish its job
• Once it is finished, it should reboot your machine, if not, do this yourself to ensure the cleaning process completes

Lets Re-hide system files and folders.
Opening Windows Explorer (to get there right-click your Start button and go to "Explore"), please do the following:

• Go to Tools (drop-down menu at the top of the window)
• Go down and click Folder Options
• Click on the View tab
• Find the Hidden Files and Folders section of the box and check "Do not show hidden files and folders"
• Again under Hidden Files and Folders, find "Hide protected operating system files (Recommended)" and check it (if it's already checked)
• Click Apply, and then Ok at the bottom.
• Close the window

++++++++++++++++++++++++++++++++++++

Other things to keep in mind.

Windows, Java, and Adobe products should all be kept up-to-date on a regular basis so the latest security fixes are in place on your computer. Please refer to the following links on how to manage these products.

• Windows Update (2000/XP) or Windows Update (Vista)
• Java
• Adobe Reader
• Adobe Flash Player

Here are a few other applications you might consider. Keeping your temporary file area clean, your Windows registry backed up, and backing up your important data are all good techniques.

• Flush Flash - by Bobbi Flekman - cleans Flash Player cookies
• ERUNT (Emergency Recovery Utility NT) - a registry backup utility
• Cobian Backup - a very good backup utility - read the tutorial here
• WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
• Green to go
• Yellow for caution
• Red to stop

WOT has an addon available for Chrome and Opera.
Please remember that just having these programs is not enough. You must use them. Running a full spyware scan weekly, a full virus scan monthly, and checking for updates and cleaning your temporary files periodically is very important in keeping your computer in tip-top shape.

Finally, please take the time to read the following articles. Applying this information will help prevent future infections:

How to prevent malware by miekiemoes
Preventing Malware and Safe Computing by Rorschach112

This article will help you understand how you may have gotten infected:
How did I get infected in the first place?

Remember, you have to be smarter than the bad guys! Be safe out there!