Virus?

Need Help With an Existing Feature in Memory Hacking Software? Ask Here

Moderators: g3nuin3, SpeedWing, WhiteHat, mezzo

Virus?

Postby Supermaker » Thu Dec 16, 2010 12:49 am

Hey guys i got a question.. So i used to have a virus on my computer.. i found it and removed it with a programme.. Since then tho every time i start my computer i get the screen i attached.. I dont know why it happens and i thought i removed all files considering mhs.. I havent used it in forever. The problem is that i cant get out of it.. If i remove that mhs it is just the background without any programmes and i need the task manager to make it work
I hope you guys can help.. Thanks!
Attachments
Fehler.GIF
Fehler.GIF (239.48 KiB) Viewed 6279 times
Supermaker
NULL
 
Posts: 199
Joined: Tue Apr 29, 2008 1:49 am

Re: Virus?

Postby L. Spiro » Thu Dec 16, 2010 4:43 am

It appears people have been using the MHS source after all.

Remove it from startup in your msconfig utility.
Start->Run->msconfig

Check for unknown services there as well.
You may also use ComboFix if that does not work.


L. Spiro
Our songs remind you of songs you’ve never heard.
User avatar
L. Spiro
L. Spiro
 
Posts: 3126
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan

Re: Virus?

Postby Supermaker » Thu Dec 16, 2010 9:19 pm

Ok so i tried to find some process.. In the picture below there are processes called lsass.. useful or could that be the reason?
And when i am in task manager and i click on the mhs process and click on change to process it tells me that it is the explorer.exe process that runs mhs
Attachments
Fehler.GIF
Fehler.GIF (48.13 KiB) Viewed 6269 times
Supermaker
NULL
 
Posts: 199
Joined: Tue Apr 29, 2008 1:49 am

Re: Virus?

Postby L. Spiro » Sun Dec 19, 2010 7:52 am

Any lsass.exe that is not located in C:\Windows\System32 is a virus and must be deleted.


L. Spiro
Our songs remind you of songs you’ve never heard.
User avatar
L. Spiro
L. Spiro
 
Posts: 3126
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan

Re: Virus?

Postby Supermaker » Sun Dec 19, 2010 7:53 pm

Ok so i unchecked those boxes with lsass.exe and i looked for those files in the place where they were supposed to be but they are not there.. you can see that they are supposed to be in: C:\Dokumente und Einstellungen\Tim\Anwendungsdaten but in the attached picture you wont find it :/
Attachments
fehler1.GIF
fehler1.GIF (83.5 KiB) Viewed 6254 times
Supermaker
NULL
 
Posts: 199
Joined: Tue Apr 29, 2008 1:49 am

Re: Virus?

Postby L. Spiro » Mon Dec 20, 2010 10:12 pm

Of course not. Lame viruses always set “Show Hidden Files” to false.


L. Spiro
Our songs remind you of songs you’ve never heard.
User avatar
L. Spiro
L. Spiro
 
Posts: 3126
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan

Re: Virus?

Postby Supermaker » Mon Dec 20, 2010 10:45 pm

L. Spiro wrote:Of course not. Lame viruses always set “Show Hidden Files” to false.


L. Spiro



so is there a way i could get it fixed?

so i set it on show hidden files and there was only 1 hidden one and it was SecuROM and 1 DAT file called addons
Supermaker
NULL
 
Posts: 199
Joined: Tue Apr 29, 2008 1:49 am

Re: Virus?

Postby L. Spiro » Mon Dec 20, 2010 11:41 pm

Then the file is not there. Remove it from start-up.
If it adds itself back then you still have a virus.


L. Spiro
Our songs remind you of songs you’ve never heard.
User avatar
L. Spiro
L. Spiro
 
Posts: 3126
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan

Re: Virus?

Postby Supermaker » Tue Dec 21, 2010 9:35 pm

Ok so i made a fast virus check and it found 9 viruses.. 5 of them werent too bad and 4 of them were located in the SystemVolumeInformation.. even tho Avast Antivirus detected them and removed them it still is a problem with booting
Supermaker
NULL
 
Posts: 199
Joined: Tue Apr 29, 2008 1:49 am

Re: Virus?

Postby L. Spiro » Thu Dec 23, 2010 1:22 am

Reformat.


L. Spiro
Our songs remind you of songs you’ve never heard.
User avatar
L. Spiro
L. Spiro
 
Posts: 3126
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan

Re: Virus?

Postby Supermaker » Fri Dec 24, 2010 12:11 am

So reformat the whole computer? :O I´d lose everything i had on there?
Supermaker
NULL
 
Posts: 199
Joined: Tue Apr 29, 2008 1:49 am

Re: Virus?

Postby L. Spiro » Fri Dec 24, 2010 9:42 pm

Everything you don’t back up.

Otherwise keep trying various anti-viruses.
SpyBot.
ComboFix.
And Avast! and the other “standard” anti-viruses.


L. Spiro
Our songs remind you of songs you’ve never heard.
User avatar
L. Spiro
L. Spiro
 
Posts: 3126
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan

Re: Virus?

Postby Explicit » Sat Dec 25, 2010 10:23 am

I'd also recommend you to use ComboFix. Good luck.
Image
Nothing is impossible, just implausible
User avatar
Explicit
I Know Your Poop
 
Posts: 503
Joined: Sun Dec 30, 2007 4:47 pm

Re: Virus?

Postby Supermaker » Thu Dec 30, 2010 10:29 pm

Oh my god thank you so much.. I used combofix and it did find a lot of viruses the anti virus program couldnt find..
you can close this.. Thanks a lot :)
Supermaker
NULL
 
Posts: 199
Joined: Tue Apr 29, 2008 1:49 am


Return to Help

Who is online

Users browsing this forum: No registered users and 1 guest

cron