i cant remove a virus and its blocking my programs

April 8, 2012 at 18:15:19
Specs: windows, 1gb
I am running on windows xp and i have a virus which spybot and avira wont pick up on. I used combofix, which went off and disappeared after that. Its not hidden or anything, just gone. I ran hijack this which im pretty sure picked up the problem but wont get rid of it. There are 2 files in my local settings (chonk and chonqaxh), which show as empty, but when i try to delete them, it says the directory is not empty. Hijack finds a file in chonqaxh called 'kkgabdhx.exe' which is an autoloading registry file.

So anyways, i cant get online due to mozilla crashing and refusing to open and ie basically not even opening, so i cant dl any software. I am currently online on my phone, so its wont let me save stuff on here thats 'unsupported'.

As a last resort, i opened winnt32 and attempted to start again, but it came up with an error code, so thats a no go.

Any ideas? I REALLY need some help.

Further info, i have no cd drive, internal or external and no money, so i cant take it to a shop.

See More: i cant remove a virus and its blocking my programs

Report •

April 9, 2012 at 01:34:45
Try booting into safe mode with networking (tap F8 a few timesvwhen the computer first starts), see if you can download and run malwarebytes.


Report •

April 10, 2012 at 08:25:20
don't suppose you can you post the hijack this log? I know that you were having issues going online so probably not, however this might get to the bottom of it.

also, at anytime in the last couple of days did you aquire a brand new spiffy windows malware system that you have never heard of? or a new program for anything. Often times a virus/malware will use random charactors to hide itself from scanners and so on(if its an older system).

If you cannot download Malwarebytes, the only thing to do is try to figure out what you have by names or odd things.

Check your proxy under internet options. if there is a proxy server listed, send me a message with the address, this may narrow things down.

If there is anything on the Hijack This Log, message the name that looks odd, and also the whole line giving where it is for example programfiles/folder/monkey/kkgabdhx.exe

If you have an idea of when this happened, do a file search for modified that day, and if anything looks wierd post it here.

good luck


Report •
Related Solutions

Ask Question