3 replies to this topic

[phantom5]

I am a certified tech and have been fighting off evil bugs for years with great success, until now.

I have been fighting this bug for over 4 hours! I use AVG which loads and runs but doesn't find anything.. I followed the instructions I found on another topic and disabled unknown non-PNP drivers being CATCHME and SPTD.

I also found msa.exe running in processes and msa.exe in \windows and msa.dll in \Program Files\Common Files

When I started this battle I had no internet connection and locked out of everything, now I have internet and iexplore stopped popping up on its own. I use FireFox btw.. IE sux!

I had an old copy of Anti-Malwarebytes which wouldn't start along with spybot S&D. I even downloaded and ran SDFix in safemode which didn't pick up anything. I uninstalled the old MBAM and managed to install the new one but it won't let me in, tried running as admin and it said the service could not be started.

I can't even get a process task list because of Framedyn.dll issues.. the file exists and the path is correst to it. I even tried getting a new copy and no difference.

Although I recommend the free version to clients I would gladly pay for software I trust to keep my main system safe.

Please help!

[Maniac]

Greetings and Welcome .

If you're having trouble getting Malwarebytes' and other tools to update or run please review the following tutorials and see if they are helpful:

• Total-Security (FakeAlert)
  
• av360 (Fakealert)
  
• CLB Rootkit driver=TDSS/Seneka/GAOPDX/UAC/ovfst
  
• SystemSecurity

If you aren't able to use those instructions or there are other issues then please follow the instructions here:
I'm infected - What do I do now?

And post your logs in a new topic here:
Malware Removal - HijackThis Logs

Please be sure not to install any software or use any removal or scanning tools except those that you are
instructed to by the expert who will be assisting you as doing so can make their job much more difficult.

note: if for some reason you are unable to run some or any of the tools in the first link, then skip that step and move on to the next one.
If you can't even run HijackThis, then just post here: Malware Removal - HijackThis Logs describing your issues and an expert will reply with further instructions.

I hope I was helpful. Good luck and safe surfing.

[phantom5]

I tried some options that you suggested but nothing seemed to gain any ground on what or how..

I ended up restoring a recovery point from a ghost image.
I was able to jump back 3 days which put me before the infection but I am running all scans fully to make sure..

I always tell people it is important to backup their data.. I'm usually the one that doesn't, luckily.. I did and have been since March.


Thanks for the help!

[Maniac]

You're welcome! If you have any questions, do not hesitate to write again!