Likely SirC infection, exe files won't operate

tashi said:

Hello papariccardo, If you haven't taken the computer to Geeks already.

If you do start a new topic please provide a link back to this thread. If you cannot produce a HJT log please make note of the situation and wait for a response from one of our helpers.

Best regards.

Click to expand...

forums.spybot.info/showthread.php?t=52588 (how do I make that a hyperlink?)

Hi Tashi, thanks for the informative reply.

This infection was noticed immediately after my son ran Spybot in the usual fashion. He is a 10yo who clicks every shiny button he sees, and hunts for free online games. Sure makes for a difficult platform to administer!

Surprisingly, GoogleChrome is working fine, but nothing else is. I have downloaded HJT.exe to the infected PC, but get the same "This program does not have a file associated with it etc". I can't recall the name of the download folder, but I suspect it's the standard XP default.

I've tried some minor regedit changes, but with no success. I have another PC beside me if that somehow helps, but as mentioned, this post is being made from the infected system.

Thanks to everyone. Please help, if you can!

http://forums.spybot.info/showthread.php?t=52588

Hi,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.

• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt
• Save both reports to your desktop. Post them back to your topic.

Download GMER here by clicking download exe -button and then saving it your desktop:

• Double-click .exe that you downloaded
• Click rootkit-tab and then scan.
• Don't check
  Show All
  box while scanning in progress!
• When scanning is ready, click Copy.
• This copies log to clipboard
• Post log in your reply.