help with virus/malware?

Question

being an idiot, i opened a file i knew i shouldn't have. i'd scanned it with norton 360 before opening it and norton found no problems, so i figured it might be ok. but it wasn't. first thing i noticed was that my internet search had been hijacked to info.com. then i started getting notifications from norton about intrusion attempts and attempted "unused port blocking". i did a windows restore from 24 hours before i opened the file, but no help. still all the attempts showing on norton. it fixed the search redirect for a few hours, but then that happened again. i downloaded malwarebytes and it only found the "trojan.hiloti" in system restore. that was quarantined and deleted. i'm still getting the attempts in norton. occasionally, my system will play some music that i've never heard before. just a few seconds of it, then it stops. i'm prepared reinstall windows on that machine, but my concern is the other two machines attached to my router. i don't think the problem can infect my router and the other two machines also have norton. i'm seeing inbound tcp connections being blocked on one of the other machines. i don't know if that's normal, since that machine is usually mapped to the infected machine. I'm also seeing "rule "default block epmap" blocked. Inbound TCP connection". i don't pretend to understand all of this. don't know if that trojan was the problem or if it's something completely unrelated. i'm lost and a bit scared that all of my machines are going to be toast. anyone ??

Answer 1

update malwarebtyes and rescan and it should fix it

Answer 2

Use a clean PC and download these three programs. Put them on a flash drive or a CD and install them on the infected PC and run them if you can. These are all FREE at http://www.download.com



1. AdAware Free Edition

2. Advanced Systems Care

3. Malwarebytes - download a fresh copy



Once you have them install them on your infected pc and run them.



Start with Malwarebytes, then ASC, and then AdAware. Run the FULL SCAN's on all of them and not a quick scan. If these three don't clean up your problem, then you may need to consider rebuilding your hard drive. If you decide to do that, back up all your files, pics, music, etc. on CD/DVS's first.

I suggest a rebuild it those programs don't work because in my estimation I'd rather spend 8 hours rebuilding it than 8, 10, 12 hours troubleshooting and not be able to get rid of the infection.



Good luck.

Answer 3

1. Download Malwarebytes’ Anti-Malware(mbam-setup.exe) and save it on your Desktop.

2. After downloading, double-click on the file to install the application.

3. Follow the prompts and install as “default” only

4. Before the installation completes, check on the following prompts:

- Update Malwarebytes’ Anti-Malware

- Launch Malwarebytes’ Anti-Malware

5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.

6. Scan your computer thoroughly.

7. When scanning is finished click on the “Show Results”

8. Make sure that all detected threats are marked, click on Remove Selected.

9. Restart your computer.

Answer 4

Your first problem was using norton. Lol, lits rubbish, use pretty much anything but that, like avivra antivir is great. But yeah I would update malwarebytes and try again. Its a great program and should fix the problem.

Answer 5

the following tools have been found best to remove this virus from computer:



1- reginout

2- combofix tool/malwarebytes antimalware

Answer 6

There are thetans in your computer.



Shut it down and put it in your refrigerator for 30 minutes to release the thetans. It should be fixed after.

Answer 7

use hijackthis