Search the Community
Showing results for tags 'notepad'.
I am not good at english so please bear with me 'cause i really need some help. I dont know what happened but im pretty sure my laptop is infected with virus/es. It just happened that everytime I wanted to open a notepad file, it will not open and rather opens a message box which tells that "Notepad.exe has stopped working" and my laptop begins to lag, making it hard for me to close the message box, and after I close it, my laptop runs again normally. I tried to open notepad and same result... and when I right click on my desktop, a message box shows that "Windows Explorer has stopped working" then my laptop lags, making it also hard for me to click the "restart the program (not exactly the words but same idea)" and when I click it, my laptop runs again normally. I tried to go to C:\windows, since I've read some forums that this may be a result of notepad.exe duplication, but when I scroll and about to see the notepad.exe, the message box "Windows Explorer has stopped working" will appear and etc. Also, I noticed that I cant even access some of my libraries, such as "My Documents" and "Program Files" since it will make the "Windows Explorer has stopped working" message box appear. Please help me with this, 'cause I can't make a backup of my files in my document since I cant access it.
8:30am PST. After spending a couple of days on a client's Zbot Cryptolocker removal and file restoration - the blocking of executables running from XP's %username%\Application Data\ folders and sub-folders was implemented through Group Policy. As a test I just now copied notepad.exe from c:\windows into the \application data\ folder. But, Malwarebytes blocked this and called Zbot Crypto on notepad.exe - and Quarantined. Next, Right Click notepad.exe and 'scan with malwarebytes' - no malware found? Next, Delete notepad.exe from windows\ and windows\system32\ and replace with known good copy. Next, copy good notepad.exe into %username%\application data\ again. Again, Malwarebytes calls Zbot Cryptolocker on the copy and quarantines. Next, copy thunk??.exe into %username%\application data\ folder & run. Group Policy blocks the execution! Whassup with copying notepad.exe from \windows into %username\application data\ ? Thanks.