Help! I've been infected

[wahoyaho]

I have trouble running some applications, e.g. task manager, kaspersky. If I rename taskmgr to say taskmgr2.exe or hijackthis to hijackthis2 however, it'll work. ><

 

[MustISO]

http://forums.anandtech.com/me...=2108933&enterthread=y
http://forums.majorgeeks.com/showthread.php?t=35407
http://www.bleepingcomputer.com/forums/forum55.html

 

[SagaLore]

So, what does your hjt log look like? Anything suspicious?

 

[mechBgon]

What was the source of the infection, if you happen to know?

 

[chemwiz]

Kaspersky can scan in safe mode, try doing that and set it to scan all files and archives. If you don't have an antispyware installed you can get Spyware Doctor free in the Google Pack.

 

[wahoyaho]

Thanks! Combo fix did the trick.

I have no idea how it got in, my best guess is the short span of time when I was upgrading from KAV6 to KAV7, there were no active protections

 

[mechBgon]

Originally posted by: wahoyaho
Thanks! Combo fix did the trick.

I have no idea how it got in, my best guess is the short span of time when I was upgrading from KAV6 to KAV7, there were no active protections

That doesn't seem to be a likely explaination, unless you're using pirated KAV7 that's been trojanized, or you brought the KAV7 installer onto the system from an infected external device (flash drive, external HDD, infected CD).

 

[wahoyaho]

Hmm.....the only time it was off was when KAV6 was uninstalled before I started installing KAV7. I was also running some other stuff at the time so I didn't reboot and install right away :x But yah, the external could be a likely source too, I'll double check the drive Thanks for the warning