Please help virus

[catsalive6]

so, if wipe my computer & re-install the OS, my computer will be fine again?

 

[Golden]

Yes, thats correct.

You will also have to consider all removable media (e.g. USB drives, burn't DVD' etc.) as compromised, and treat them appropriately.

Regards,
Golden

 

[catsalive6]

What does that mean? Like everything I've ever plugged in? I have a chip for my wireless mouse plugged in.. Is the virusy now? And my wireless printer?

 

[Golden]

No. It means an external storage devices. For example:

- USB drives
- USB thumbs drives

Any files on those could also have been infected.

 

[WindowsStar]

Catsalive,

One or more of the identified infections is a backdoor trojan. This allows hackers to remotely control your computer, steal critical system information and Download and Execute files

I would counsel you to disconnect this PC from the Internet immediately.

Although we may be able to remove the trojan, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:


I would strongly recommend format and reinstallation of this machine. For more information, you may wish to read one of these excellent articles:

• Malware Removal -- Where to Draw the Line
• When Should I Reformat? How Should I Reinstall?
• How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

Please let me know if you wish to continue to clean this machine or if you wish to format.

Corrine, forgive my ignorance but what in the diag logs lead you to the backdoor installed on this machine? -WS

 

[Corrine]

Hi, WS. Take a look at this and the linked topics.

 

[WindowsStar]

Hi, WS. Take a look at this and the linked topics.

Forgive me again, but Wininit.exe is a Microsoft .exe. Without a file date how would you know it is a virus? I see it in the list of processes, however I have it on my machines??? I looked at the date stamp of the file and it looks correct.

I must be missing something.