Malware Removal Forums

TCRDMAIN.EXE ???

timothych · 2011-03-04T22:06:30+00:00

Hi there, Oops, my last post was closed as I responded erroneously. Third time luck. I posted here earlier in the week and was being promptly assisted by deltalima. I ran into a bit of confusion with virustotal and was unable to get back online for a few days. I'm back now but my original post has expired. I wonder that I may yet receive assistance from this forum. The virus manifests as an apparent "fix" to viruses on the machine, though I dunno know if these are fakes or not. Upon opening any program I get the message "Warning! application cannot be executed. The file TCdrmain.exe is infected. Please activate your antivirus software." When running in safe mode I can open either chrome or IE but get the message "Internet Explorer/Chrome Alert. Visiting the site may pose a security threat to your system!" and am blocked from opening any sites. I have rerun HJT, and provide the logs as follows: Regards, Tim >>>>>>> Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:01:43, on 04/0

2 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

timothych

March 22, 2011, 6:19 AM UTC

Hi blade81,
Thanks for your suggestion. I'll run combofix as you suggest in the next day or too.
Cheers, Tim

Blade81 Admin/Teacher

March 22, 2011, 4:37 PM UTC

Ok. Shall wait for the results

timothych

March 24, 2011, 10:03 AM UTC

Hi blade81,
I have tried to restart the computer in normal mode but windows hangs up after I enter my login password. Any ideas how I can perform this operation in safe mode?
Regards, Tim

Blade81 Admin/Teacher

March 24, 2011, 2:01 PM UTC

Hi,

Has this hanging up issue occured earlier? Please run ComboFix (let it update itself) and DDS in safe mode then - like earlier. Post back the reports.

Blade81 Admin/Teacher

March 29, 2011, 4:46 PM UTC

inactivity

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.