Argonath RPG - A World of its own

Argonath RPG Community => Hardware/Software support => Resolved issues => Topic started by: Grovyle on July 03, 2008, 08:44:42 pm

Title: My computer is infected!???
Post by: Grovyle on July 03, 2008, 08:44:42 pm: OMG people, you gotta help me :cry: I think my computer is infected by Trojans and virus (atleast I will format soon), because:

When I open a ZIP with a folder, Internet Explorer automaticly opens and leads me to a page like... something random.
My computer is slower
Steam says that Garry's Mod and Portal aren't installed but they work
Also, some dlls happeared in C:\ for no reason!!! Also other files, I will say their names:
eula.1028.txt
eula.1031.txt
eula.1033.txt
eula.1036.txt
eula.1040.txt
eula.1041.txt
eula.1042.txt
eula.2052.txt
eula.3082.txt
globdata.ini
install.exe
install.ini
install.res.1028.dll
install.res.1031.dll
install.res.1033.dll
install.res.1036.dll
install.res.1040.dll
install.res.1041.dll
install.res.1042.dll
install.res.2052.dll
install.res.3082.dll
VC_RED.CAB
VC_RED.MSI
vcredist.bmp

These files just happeared randomly... I don't know from where.

Also, the INI install says:

Quote
[Setup]
ProductName=Microsoft Visual C++ 2008 Redistributable Package
ProductMsi=vc_red.msi
ProductRegKey=
ProductRegName=
ProductRegData=
ProductSupportURL=http://go.microsoft.com/fwlink/?LinkId=45396
DefaultDirInstallToken=
SupportWin9X=0
MinNTVersion=5.0
CheckAdminRights=1
ShowFeatureOptions=0
ShowDestinationFolder=0
LogFilePrefix=dd_vcredist
VerboseLog=1
RebootMode=0
UILanguage=1033
BitmapFile=vcredist.bmp
CustomTextPrefix=CustomText

[DetectDarwin]
X86=2.0
I64=2.0
A64=2.0
Install=0
Link=http://go.microsoft.com/fwlink/?LinkId=45724

[VSSetupWatson]
VSSWSuccessEnabled=1
VSSWSuccessHeadless=1
VSSWFailedEnabled=1
VSSWFailedHeadless=1
VSSWProdName=Microsoft Visual C++ 2008 Redistributable Package
VSSWProdVer=[VERSION]_[LAB]_[PFLAVOR]
VSSWSectionEnabled=1
VSSWProdSAID=11867
VSSWInternalRelease=1

Also, the other one says:
Quote
[ProductNames]
ProductName.1033=Microsoft Visual C++ 2008 Redistributable
ProductName.1041=Microsoft Visual C++ 2008 Redistributable
ProductName.1042=Microsoft Visual C++ 2008 Redistributable
ProductName.1028=Microsoft Visual C++ 2008 Redistributable
ProductName.2052=Microsoft Visual C++ 2008 Redistributable
ProductName.1036=Microsoft Visual C++ 2008 Redistributable
ProductName.1040=Microsoft Visual C++ 2008 Redistributable
ProductName.1031=Microsoft Visual C++ 2008 Redistributable
ProductName.3082=Microsoft Visual C++ 2008 Redistributable

Please help :(
Title: Re: My computer is infected!???
Post by: Grovyle on July 03, 2008, 10:03:59 pm: CRAP!! Now I found out what I have:
Spyware and Adware...
How Do I remove them? :(
Title: Re: My computer is infected!???
Post by: polopolo on July 03, 2008, 10:19:49 pm: http://www.argonathrpg.eu/forum/index.php?topic=17679.0
Title: Re: My computer is infected!???
Post by: Grovyle on July 03, 2008, 11:37:32 pm: i dont really know how to use it :(
Title: Re: My computer is infected!???
Post by: Fatboy_Rob on July 04, 2008, 12:09:56 am: Quote from: Grovyle on July 03, 2008, 11:37:32 pm
i dont really know how to use it :(
Can't read?
All the instructions are there...
Title: Re: My computer is infected!???
Post by: polopolo on July 04, 2008, 06:53:31 am: Quote
Do you get something like this? Then download: http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis
Install it, when you got installed it, then check one of the next websites:

spywareinfoforum.com
bleepingcomputer.com
or one of the other trusted anti-virus websites at: http://asap.maddoktor2.com/

There many people are for free helping you, to remove the virus and helping to prevent that.

at their forum, check out for 'HJT logs' or something with spyware removal. There is an topic (sticky most time) that explains everything.
Title: Re: My computer is infected!???
Post by: Grovyle on July 04, 2008, 12:45:29 pm: Lock the topic - I got a good tool. *coughonecarerules*cough*

Requesting topic lock
Reason: I got a good tool that can remove these idiots out of my computer.
~~Grovyle

Oh also, the C++ thing has been removed, I did never installed it, I uninstalled it and works fine. Trojan removed.