Virus creates an icon with a computer and replicates "My Computer"
Does anyone have any info on a virus that creates an additional computer icon. When you click the plus it basically shows the contents of "my computer" and it continues forever? The icon's properties says it is approx 15mb yet it is continuous.. it also has no indication of being simply a shortcut.
I have scanned this computer and it is scanning clean after I used; adwcleaner, malwarebytes, malwarebytes rootkit scanner, and rogue killer.
I am still noticing that since this began the user has not been able to attach pictures from his my doc folder. I went in and reset his permissions and tried to stop his antivirus and send and it did not correct the issue. I had another post some time back where the Outlook issue occurred with another user
The system is an Windows XP sp3 and I am including the adwcleaner log and will attach a screen shot of the replicating my computer deal the name of it is "32788R22FWJFW"...
# AdwCleaner v3.015 - Report created 17/12/2013 at 10:13:41
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : jfischer - QTYMANAGER
# Running from : E:\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Found C:\Documents and Settings\Administrator.SIL
Folder Found C:\Documents and Settings\jfischer\Applicat
Folder Found C:\Documents and Settings\jfischer\Local Settings\Application Data\AskToolbar
Folder Found C:\Documents and Settings\jfischer\Local Settings\Application Data\PackageAware
Folder Found C:\Program Files\alotappbar
Folder Found C:\Program Files\Ask.com
Folder Found C:\WINDOWS\installer\{86d4
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\alotAppbar
Key Found : HKCU\Software\AppDataLow\A
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\AskToolbar
Key Found : HKCU\Software\Microsoft\In
Key Found : HKCU\Software\Microsoft\In
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\YahooPartner
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\Gene
Key Found : HKLM\SOFTWARE\Classes\Gene
Key Found : HKLM\Software\Classes\Inst
Key Found : HKLM\Software\Classes\Inst
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\S
Key Found : HKLM\SOFTWARE\Classes\Type
Key Found : HKLM\SOFTWARE\Classes\Type
Key Found : HKLM\SOFTWARE\Classes\Type
Key Found : HKLM\Software\Description
Key Found : HKLM\SOFTWARE\Microsoft\In
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Value Found : HKCU\Software\Microsoft\In
Value Found : HKLM\SOFTWARE\Microsoft\In
Value Found : HKLM\SOFTWARE\Microsoft\In
Value Found : HKLM\SOFTWARE\Microsoft\In
***** [ Browsers ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Google Chrome v31.0.1650.63
[ File : C:\Documents and Settings\jfischer\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Documents and Settings\Administrator.SIL
*************************
AdwCleaner[R0].txt - [7936 octets] - [17/12/2013 10:13:41]
########## EOF - C:\AdwCleaner\AdwCleaner[R
IMG-20131217-111907-453.jpg
I have scanned this computer and it is scanning clean after I used; adwcleaner, malwarebytes, malwarebytes rootkit scanner, and rogue killer.
I am still noticing that since this began the user has not been able to attach pictures from his my doc folder. I went in and reset his permissions and tried to stop his antivirus and send and it did not correct the issue. I had another post some time back where the Outlook issue occurred with another user
The system is an Windows XP sp3 and I am including the adwcleaner log and will attach a screen shot of the replicating my computer deal the name of it is "32788R22FWJFW"...
# AdwCleaner v3.015 - Report created 17/12/2013 at 10:13:41
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : jfischer - QTYMANAGER
# Running from : E:\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Found C:\Documents and Settings\Administrator.SIL
Folder Found C:\Documents and Settings\jfischer\Applicat
Folder Found C:\Documents and Settings\jfischer\Local Settings\Application Data\AskToolbar
Folder Found C:\Documents and Settings\jfischer\Local Settings\Application Data\PackageAware
Folder Found C:\Program Files\alotappbar
Folder Found C:\Program Files\Ask.com
Folder Found C:\WINDOWS\installer\{86d4
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\alotAppbar
Key Found : HKCU\Software\AppDataLow\A
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\AskToolbar
Key Found : HKCU\Software\Microsoft\In
Key Found : HKCU\Software\Microsoft\In
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\Microsoft\Wi
Key Found : HKCU\Software\YahooPartner
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\AppI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\CLSI
Key Found : HKLM\SOFTWARE\Classes\Gene
Key Found : HKLM\SOFTWARE\Classes\Gene
Key Found : HKLM\Software\Classes\Inst
Key Found : HKLM\Software\Classes\Inst
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\Inte
Key Found : HKLM\SOFTWARE\Classes\S
Key Found : HKLM\SOFTWARE\Classes\Type
Key Found : HKLM\SOFTWARE\Classes\Type
Key Found : HKLM\SOFTWARE\Classes\Type
Key Found : HKLM\Software\Description
Key Found : HKLM\SOFTWARE\Microsoft\In
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\Software\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Key Found : HKLM\SOFTWARE\Microsoft\Wi
Value Found : HKCU\Software\Microsoft\In
Value Found : HKLM\SOFTWARE\Microsoft\In
Value Found : HKLM\SOFTWARE\Microsoft\In
Value Found : HKLM\SOFTWARE\Microsoft\In
***** [ Browsers ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Google Chrome v31.0.1650.63
[ File : C:\Documents and Settings\jfischer\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]
[ File : C:\Documents and Settings\Administrator.SIL
*************************
AdwCleaner[R0].txt - [7936 octets] - [17/12/2013 10:13:41]
########## EOF - C:\AdwCleaner\AdwCleaner[R
IMG-20131217-111907-453.jpg
ASKER
I thought about that.... and it may be what I end up doing to get those permissions to reset.. even when I search online for any similar viruses I don't see any...
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If restore works, rescan with Malwarebytes antimalware and Adwcleaner.