Windows hanging hanging ghanging...

Hello and Welcome to TSF,

Go here please:

http://www.techsupportforum.com/secu...-spyware-help/

Please read “Virus/Trojan/Spyware Removal Help “ and follow the instructions
very carefully; then, post all the requested logs and information in the Virus Help Forum
Please ensure that you create a new thread in the Virus Help Forum; not back here in this one.
Please be patient, as the Security Team Analysts are usually very busy; one of them will
answer your request as soon as they can.

Hello Henry

It would also be a good idea to check the hard drive. This could be the first signs of problems.

If it is possible back up all your data and files before checking the drive.

So, run check disk
Start/Run and type in
cmd
OK

The command prompt window will open
At the prompt type
chkdsk /r (there is a space before /)
Enter

You must now reboot and chkdsk will run with the "r" switch and try to repair any errors it finds.

Depending on what is found this might not take too long, or it might take hours and hours, so be prepared for that.

.

hi,

I recently got rid of trojan.clicker, booted from a live cd etc and manually removed files as in another thread

http://www.techsupportforum.com/f10/usb-mass-storage-not-showing-in-explorer-366193.html

Could there be more?

I have a client arriving now, so as soon as that is done I will start.

By the way... I don't know if this is relevant but Nero stopped burning CD/DVD (would go through all the motions including verifying the disk, but then disk would come out blank!). I uninstalled that and installed Sonic, which burns but always gives an error on verify. The disk is readable though and I can't see any problems (yet).

Thanks,
Henry

Did you run chkdsk and what happened when you ran it?

I think you need to still report to this forum please.

http://www.techsupportforum.com/secu...-spyware-help/

Please read “Virus/Trojan/Spyware Removal Help “ and follow the instructions
very carefully; then, post all the requested logs and information in the Virus Help Forum
Please ensure that you create a new thread in the Virus Help Forum; not back here in this one.
Please be patient, as the Security Team Analysts are usually very busy; one of them will
answer your request as soon as they can.

answering to last post: could there be more?
yes there can.

I want to reboot pc and go into safemode with networking
connect to internet and download this here:

http://www.malwarebytes.org/mbam.php
choose free version (blue button)

install anit-malwarebytes after downloading and let it update immediately
after update completes, disconnect from online and run a full scan.

Please post the results here of the scan, ty.

Ok, rebooted to Safe Mode, downloaded and ran malwarebytes

Results:

Malwarebytes' Anti-Malware 1.36
Database version: 2081
Windows 5.1.2600 Service Pack 3

2009/05/06 10:51:15 AM
mbam-log-2009-05-06 (10-51-15).txt

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 196804
Time elapsed: 34 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
D:\Documents and Settings\Henry & Lisa\Desktop\HENRY_ANTISPY\734fdd98_sys.old (Backdoor.Rustock) -> Quarantined and deleted successfully.

_________________________________________________________

Now that last item is what I removed manually from the last time. I always rename and/or move stuff I am not sure about. So that was 734fdd98.sys but I moved & renamed it to 734fdd98_sys.old.

Anyway, that's it for now. I have 30gig of valuable backups to do before I can try anything serious. Plus my burner is not giving me a thumbs up on verifying data.

So forgetting for a moment that I am not 100% sure my backups to DVD are 100% right, should I not just wipe the whole HD & start over? Wouldn't that be easier? I have spent hours & hours trying to sort my machine out, plus now I am dragging all you guys into the fray. I am sure you'd rather be doing something else than trying to sort my problem out.

Thanks,
Henry.

Henry, but thats what we are here for and also the forum,
no problem and thanks for showing your consideration.

I still encourage you to go here:

http://www.techsupportforum.com/secu...-spyware-help/

Please read “Virus/Trojan/Spyware Removal Help “ and follow the instructions
very carefully; then, post all the requested logs and information in the Virus Help Forum
Please ensure that you create a new thread in the Virus Help Forum; not back here in this one.
Please be patient, as the Security Team Analysts are usually very busy; one of them will
answer your request as soon as they can.

Before you do anything go and read please even backing up, because without knowing you could be backing up infections.

Note: Some infections are invisible, you cannot see them with a human eye, ok?
you see my point now?

You need to go and cleanup the harddrive first, before even just reinstalling windows.
It will have the new installation run smoothly without any problems.