Hello guys and gals, again! How you doing?
We're having some issues with one notebook here and it seems pretty bad.
Apart of the system being very slow, and weird when starting (you press the start button, it acts as if it was going to freeze or show some error, but slowly starts to run), AVG opens up right when you start the comp and shows already around three different threats.
These follow:
C:\Users\username\appdata\Roaming\Geo-Dom.exe
C:\Users\username\appdata\Roaming\autoupdate.exe
C:\Users\username\appdata\Roaming\Qonifa.dll
When I open up any of the browsers the pages are not the chosen startpage. When testing Firefox, it showed a link with lots of numbers and letters saying something like 'host not available' and Chrome opens up Gogletab.com as startpage.
This got me a bit nervous about using the browser, that's why I didnt download the required program in the GeeksToGo Malware Guide.
Still, I couln't find any way to change the startpage of any of those.
When I opened the processes I found dlllhost.exe, vpnui.exe, syshostctl.exe, dwm.exe...
I'm trying to run malwarebites, it has found around 247 threats and still running, but the system is very slow.
I also just tryed disconnecting it from internet and the warnings of trojan don't show.
It's a Toshiba Statellite L750/755, runs Windows Vista 7 64-bits
Hope anybody can give me some enlightening.
Thanks ahead!