Likely SirC infection, exe files won't operate

[papariccardo]

Hello papariccardo, If you haven't taken the computer to Geeks already. ;)

If you do start a new topic please provide a link back to this thread. If you cannot produce a HJT log please make note of the situation and wait for a response from one of our helpers.

Best regards. :)

forums.spybot.info/showthread.php?t=52588 (how do I make that a hyperlink?)

Hi Tashi, thanks for the informative reply.

This infection was noticed immediately after my son ran Spybot in the usual fashion. He is a 10yo who clicks every shiny button he sees, and hunts for free online games. Sure makes for a difficult platform to administer!

Surprisingly, GoogleChrome is working fine, but nothing else is. I have downloaded HJT.exe to the infected PC, but get the same "This program does not have a file associated with it etc". I can't recall the name of the download folder, but I suspect it's the standard XP default.

I've tried some minor regedit changes, but with no success. I have another PC beside me if that somehow helps, but as mentioned, this post is being made from the infected system.

Thanks to everyone. Please help, if you can!

http://forums.spybot.info/showthread.php?t=52588

[Blade81]

Hi,

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.


Download GMER (http://www.gmer.net) here by clicking download exe -button and then saving it your desktop:
Double-click .exe that you downloaded
Click rootkit-tab and then scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log in your reply.