1 reply to this topic

[kingkoor]

Windows XP

Hi everyone, thanks in advance for any help. I am typing on my un-infected laptop. My computer is infected, desktop screen is changed and I cant open a thing in regular boot mode. Immediately the fake scanner pops up which leads into other pop ups. The desktop is changed to the big scary warning you are in danger message. Again I cant open a single thing, I spent like 6-7 hours trying to get this removed but no luck, in regular mode I have tried renaming files for mbam and super anti, tried renaming from exe to bat, com and others with no luck. Hijack wont open so I cant make a log. I booted into safe mode many times and tried full and quick scans with malwarebytes, super anti. I did manual definition updates on both as well. It finds stuff and deletes but on reboot every time it's back instantly. I tried that smitfraudfix which also worked at first but within literally a few seconds the desktop had changed and the scanner was running. This is so so so frustrating and I dont know what else to do, in safe mode I cant get any internet connection. I tried safe mode with networking but couldnt get online either. So yeah as of right now my computer is completely inoperable right now, this is some nasty infection as I have never had this much trouble trying to get rid of something like this.

[sjpritch25]

Welcome to Malwarebytes.org

no problem running the below program in Safe Mode


Download Combofix from this webpage: http://www.bleepingc...to-use-combofix

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

--------------------------------------------------------------------

Double click on combofix.exe & follow the prompts.

When finished, it will produce a report for you.

• Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall