[ken121]

Hi, My Wifes system had a malfunction, it became extreemely slow first, I restarted it thinking she was probably running low on memory, whe it restarted it said preparing desktop then had a window saying,:You have been logged on with a temorary profile. You cannot access your files and files created will be deleted...ect.

I ran a virus scan and found 2 virus's that I deleted...Both occured at 10:47am. I searched for modified files for the date and time and found some entrys that have me concerned. I have listed the items as they appeared in my search:

1)fdd56c73-f0d5-41b6-b767-6effd7966428 located: C:\Windows\System32\LogFiles\Scm

2)5c0aeeea-c154-45be-8499-bea5f11baff6 located: C:\Windows\System32\LogFiles\Scm

3)F_IN_BOX.dll Located: C:\Users\usernameblocked\AppData\Local\Temp\AFF1.tmp

4)3C3948BE6E525B8A8CEE9FAC91C9E392_C8FA2A733FE2A95A8ABEB57315278F81
located C:\Users\usernameblocked\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
was 1.9kb in size

5)130ADF60D1B7B3CF82CC6CA82D961601_EC2B8F0C530DA57B6BD72F9ED19E4B95
located C:\Users\usernameblocked\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
was 1.95kb in size

these both repeated and were 412 and 414 bytes in size

in looking up,"cryptnet" I see the have things like password generators ect.

all of our files are still located on C: but I am not sure how to get the system back to normal. All of the Saved Restore points I had are missing

[Advertisements]

Duplicate topic. Duplicate moved to malware forum and this one closed.

[CompCav]

Duplicate topic. Duplicate moved to malware forum and this one closed.