7 replies to this topic

[Pacers31]

Hi there.

My windows Xp computer has been infected by some nasty viruses. I have McAfee AntiVirus and a week ago I found around 15 trojans that I deleted. Now, the virus is taking over my computer! It has changed my wallpaper, and prevents me from using the control panel, anti-virus, etc. It also redirects me to different pages when I'm on the internet. I am using my good computer right now.

The name of the antivirus its trying to get me to download is called "Advanced Virus Remover". There is also a different one that pops up that is called "Protection System".

I have tried downloading about 5 anti-spyware removers from Cnet, but usually the virus prevents the installation.

The 2 times that it was succesfully installed, I have tried scanning the computer, but the virus immediately stops the program and then freezes my computer. Afterwards, trying to launch the program does not work.

So any ideas? I am trying to fix this ASAP since it's one of my office computers.

Thanks!

-Alex

[Firefox]

Greetings and Welcome Alex .

If you're having trouble getting Malwarebytes' and other tools to update or run please review the following tutorials and see if they are helpful:

• Total-Security (FakeAlert)
  
• av360 (Fakealert)
  
• CLB Rootkit driver=TDSS/Seneka/GAOPDX/UAC/ovfst
  
• SystemSecurity

If you aren't able to use those instructions or there are other issues then please follow the instructions here:
I'm infected - What do I do now?

And post your logs in a new topic here:
Malware Removal - HijackThis Logs

Please be sure not to install any software or use any removal or scanning tools except those that you are
instructed to by the expert who will be assisting you as doing so can make their job much more difficult.

note: if for some reason you are unable to run some or any of the tools in the first link, then skip that step and move on to the next one.
If you can't even run HijackThis, then just post here: Malware Removal - HijackThis Logs describing your issues and an expert will reply with further instructions.

I hope I was helpful. Good luck and safe surfing.

[Pacers31]

The program will start, but when I scan, it stops.

It then won't start a second time.

Do i need to use a CD or USB?

[Firefox]

you could also try and rename the file mbam.exe TO winlogon.exe and then run the scan and see if it finishes. Something I have tried as well is rename the file to winlogon.COM and that ran.

[Pacers31]

Pacers31, on Sep 4 2009, 01:29 PM, said:

The program will start, but when I scan, it stops.

It then won't start a second time.

Do i need to use a CD or USB?

it wont matter that the extension isnt .exe?

[prairie dog]

Firefox, on Sep 4 2009, 03:16 PM, said:

Greetings and Welcome Alex .



If you aren't able to use those instructions or there are other issues then please follow the instructions here:
I'm infected - What do I do now?

And post your logs in a new topic here:
Malware Removal - HijackThis Logs

Please be sure not to install any software or use any removal or scanning tools except those that you are
instructed to by the expert who will be assisting you as doing so can make their job much more difficult.

note: if for some reason you are unable to run some or any of the tools in the first link, then skip that step and move on to the next one.
If you can't even run HijackThis, then just post here: Malware Removal - HijackThis Logs describing your issues and an expert will reply with further instructions.

I hope I was helpful. Good luck and safe surfing.

Please follow these set of instructions that were posted by Firefox previously. Malware removal is not worked on in the General forum. Thanks!

[Pacers31]

prairie dog, on Sep 4 2009, 02:08 PM, said:

Please follow these set of instructions that were posted by Firefox previously. Malware removal is not worked on in the General forum. Thanks!

then where can i post then? i followed the instructions but it still wont allow me to launch ((

[prairie dog]

Read the part that is colored green