Hi!!
This annoying problem is normally caused by a randomly named
executable (.exe) file that is loaded at Windows start up; it is
commonly located in the Windows\system or Windows\System32 folder
depending on the version of Windows that are you using.
First thing that you can do:
Boot in safe mode:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam
Then, in safe mode, use MSCONFIG tool to uncheck the suspicious file
at the Start Up tab in order to prevent to load it at start up. For
instruccions see:
"How to use MSCONFIG":
http://netsquirrel.com/msconfig/
Just search for a file listed with a very strange name (randomly
generated) like qderft.exe or pyhfjk.exe, before uncheck it you can do
a search at Google for the name of the file, if it is not a known
file you can uncheck it, then delete the icon at the desktop and
reboot normally to check what happens. If the icon does not appear
again you can safely delete the unchecked file.
If the above procedure fails or you dare not or do not want to perform
the above tasks I must take a look into your computer system, to do
that you must download and run a tool called HijackThis (HJT). To
download it:
http://www.spywareinfo.com/~merijn/files/HijackThis.exe
Put the program in a specific folder for it. I will need that you post
as a request for a clarification a HJT log (and please do not fix
anything just generate a log and post it here, HJT is a powerful tool
and when it is misused it can cause a complete misconfiguration of
your folder and/or your operative system), in order to do that follow
the instructions here:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42#HowToUse
I will analyze the log and after that I will tell you what must be
fixed in order to complete the cleaning of your computer.
Remember that this answer is not considered ended until you feel
satisfied with it, so please feel free to use the clarification
feature to request for further assistance if you need it.
Regards.
livioflores-ga |