BleepingComputer.com: What do you think Conficker will do on April 1st?

Meant nicely as a Great Grand Parent.

Young Lad was talking to his Grand Dad.

"Grand Pa, where is the Forest really at?"

Grand Pa said, "Look, it is just in front of you!"

Young Lad, quite bewildered, "But I can't see it, there are too many trees blocking my view?"

That is really what Life really is all about, Mate.

Look for what is behind the Trees?

This post has been edited by Abacus 7: 05 April 2009 - 12:20 PM

I was infected with the conficker worm last night. But I was infected while I was sleeping.

I've tried EVERYTHING. I still have the virus. I cannot run my malwarebytes, superantispyware, spybot, or any other program. My Norton will scan, but it will only scan 5,000 files and tell me that I am not infected.

I ran highjack this, and had to do it several times. Finally, it says I got rid of everything. However, I'm still infected. When I do a search on google for most sites, it sends me to another site. I cannot view any of the sites that have antispyware programs. However, I can access those sites if I type the address in the address bar.

I don't have a credit card to purchase a program online. Ughhhhhhh. Am I the only one in the United States to be infected? This really sucks.

jmccracky,

Sorry to hear about that dilemma.

I would start at "Am I Infected what do I do".

Do not post a "Hijack This" log there. (there is another place for that)

jmccracky, to run it, try changing the name of the .exe file in C:\Program Files\Malwarebytes' Anti-Malware
eg, change this
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

don't forget to change the name of the shortcut too or just make a new one...

demonluo, on Apr 5 2009, 06:47 PM, said:

If you don't mind me asking, but how do I change a file name? I have no idea where to go and how to do this. I'm pretty dumb about computers. Thanks! If that doesn't work, I'll post in the "Are you infected forum". Again, thanks.

Rather than attempting to modify the filename you might best be served downloading the application and running it from malwarebytes.org you can choose the free trial version.


I would recommend following "Am I infected what do I do"


Also, if you run HJT do not make any changes...let a HijackThis Team member look it over.

For best results be patient

This post has been edited by Martel: 05 April 2009 - 10:59 PM

Grinler, on Apr 5 2009, 10:31 AM, said:

I understand! I could not really express knowledge on the site about internet security, due to restrictions on forums. At the beginning of my posting here, first 40 posts in fact, I only worked in the Am I infected forum, before realizing that I should go elsewhere due to restrictions. Thank you for your point of view, and like I said earlier I appreciate your confidence.

Abacus 7, on Apr 5 2009, 12:17 PM, said:

Yeah; yeah. a scuba as Cuba.

jmccracky, on Apr 6 2009, 10:02 AM, said:

go to start>computer>local disk(c:)>program files>Malwarebytes' Anti-Malware>mbam.exe(right click mbam.exe & then choose rename)

change to a name that no one can guess(eg, 12321.exe) but the extension should still be .exe

after that, double click 12321.exe(or whatever name u choose) to see if it work...

mbam.exe is the main exe but u might still need to change the other .exe file if don't work,
eg,
mbam-dor.exe <-?
mbamgui.exe <-gui?
mbamservice.exe <-update?
unins000.exe <-uninstall?

to rename .exe for desktop/quicklaunch/program shortcut,
right click the shortcut icon & then choose properties>shortcut>target: "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"
change the name that u change eariler(main exe)
eg, "C:\Program Files\Malwarebytes' Anti-Malware\12321.exe"

normally by changing the name of .exe will work but if still don't work, u should ask for help in the forum...

edit:
Malwarebytes' Anti-Malware v1.36 is out now...

This post has been edited by demonluo: 07 April 2009 - 06:26 AM

It's alive!

http://www.bleepingcomputer.com/forums/topic219131.html