Page 1 of 1

Virus?

PostPosted: Thu Dec 16, 2010 12:49 am
by Supermaker
Hey guys i got a question.. So i used to have a virus on my computer.. i found it and removed it with a programme.. Since then tho every time i start my computer i get the screen i attached.. I dont know why it happens and i thought i removed all files considering mhs.. I havent used it in forever. The problem is that i cant get out of it.. If i remove that mhs it is just the background without any programmes and i need the task manager to make it work
I hope you guys can help.. Thanks!

Re: Virus?

PostPosted: Thu Dec 16, 2010 4:43 am
by L. Spiro
It appears people have been using the MHS source after all.

Remove it from startup in your msconfig utility.
Start->Run->msconfig

Check for unknown services there as well.
You may also use ComboFix if that does not work.


L. Spiro

Re: Virus?

PostPosted: Thu Dec 16, 2010 9:19 pm
by Supermaker
Ok so i tried to find some process.. In the picture below there are processes called lsass.. useful or could that be the reason?
And when i am in task manager and i click on the mhs process and click on change to process it tells me that it is the explorer.exe process that runs mhs

Re: Virus?

PostPosted: Sun Dec 19, 2010 7:52 am
by L. Spiro
Any lsass.exe that is not located in C:\Windows\System32 is a virus and must be deleted.


L. Spiro

Re: Virus?

PostPosted: Sun Dec 19, 2010 7:53 pm
by Supermaker
Ok so i unchecked those boxes with lsass.exe and i looked for those files in the place where they were supposed to be but they are not there.. you can see that they are supposed to be in: C:\Dokumente und Einstellungen\Tim\Anwendungsdaten but in the attached picture you wont find it :/

Re: Virus?

PostPosted: Mon Dec 20, 2010 10:12 pm
by L. Spiro
Of course not. Lame viruses always set “Show Hidden Files” to false.


L. Spiro

Re: Virus?

PostPosted: Mon Dec 20, 2010 10:45 pm
by Supermaker
L. Spiro wrote:Of course not. Lame viruses always set “Show Hidden Files” to false.


L. Spiro



so is there a way i could get it fixed?

so i set it on show hidden files and there was only 1 hidden one and it was SecuROM and 1 DAT file called addons

Re: Virus?

PostPosted: Mon Dec 20, 2010 11:41 pm
by L. Spiro
Then the file is not there. Remove it from start-up.
If it adds itself back then you still have a virus.


L. Spiro

Re: Virus?

PostPosted: Tue Dec 21, 2010 9:35 pm
by Supermaker
Ok so i made a fast virus check and it found 9 viruses.. 5 of them werent too bad and 4 of them were located in the SystemVolumeInformation.. even tho Avast Antivirus detected them and removed them it still is a problem with booting

Re: Virus?

PostPosted: Thu Dec 23, 2010 1:22 am
by L. Spiro
Reformat.


L. Spiro

Re: Virus?

PostPosted: Fri Dec 24, 2010 12:11 am
by Supermaker
So reformat the whole computer? :O I´d lose everything i had on there?

Re: Virus?

PostPosted: Fri Dec 24, 2010 9:42 pm
by L. Spiro
Everything you don’t back up.

Otherwise keep trying various anti-viruses.
SpyBot.
ComboFix.
And Avast! and the other “standard” anti-viruses.


L. Spiro

Re: Virus?

PostPosted: Sat Dec 25, 2010 10:23 am
by Explicit
I'd also recommend you to use ComboFix. Good luck.

Re: Virus?

PostPosted: Thu Dec 30, 2010 10:29 pm
by Supermaker
Oh my god thank you so much.. I used combofix and it did find a lot of viruses the anti virus program couldnt find..
you can close this.. Thanks a lot :)