WHatever this is, it just totally took over my laptop. My Avira is useless and I can't even open IE to get to BC. Any idea what this is out what I can do (posting this from my smart phone).
Thanks in advance.
Edit: Moved topic from Win 7 to the more appropriate forum. ~ Animal
Page 1 of 1
Win-7 Anti-Spyware
#2
Posted 18 April 2011 - 02:27 PM
I would suggest downloading MalwareBytes to a flash drive from a clean computer, booting your infected mahcine in safemode with networking and run MB off the flash drive to see what it picks up(update MB first). If it will not let you run the MB executable rename it and then try to run it. Delete temp files and check your host file to ensure it hasnt been altered.
This post has been edited by McGrubber: 18 April 2011 - 02:28 PM
#3
Posted 18 April 2011 - 05:24 PM
I got started up in safe mode. Any links I can follow from BC to get ridda this thing??
#4
Posted 18 April 2011 - 09:03 PM
reboot to safe mode with Networking. Next follow this Removal Guide here Win 7 Antispyware .
After reading how the malware is misleading you ...
You will move to the Automated Removal Instructions
After you completed that, post your scan log here,let me know how things are.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
After reading how the malware is misleading you ...
You will move to the Automated Removal Instructions
After you completed that, post your scan log here,let me know how things are.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook
#5
Posted 19 April 2011 - 08:39 AM
Worked like a charm. BC and the genius volunteers that run it are amazing, as always.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6393
Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385
4/18/2011 7:56:06 PM
mbam-log-2011-04-18 (19-56-06).txt
Scan type: Full scan (C:\|D:\|)
Objects scanned: 308282
Time elapsed: 25 minute(s), 20 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c:\Users\ben and melanie\AppData\Local\Temp\0.6845709580833846.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6393
Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385
4/18/2011 7:56:06 PM
mbam-log-2011-04-18 (19-56-06).txt
Scan type: Full scan (C:\|D:\|)
Objects scanned: 308282
Time elapsed: 25 minute(s), 20 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c:\Users\ben and melanie\AppData\Local\Temp\0.6845709580833846.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
#6
Posted 19 April 2011 - 09:11 AM
Should I buy the full version of MB for protection? I was using Avira when I got attacked so obviously I'm looking for a new AV program...lol.
#7
Posted 19 April 2011 - 09:16 AM
Hello, it is probably the best $30 you spend. But Keep Avira also they work well together and compliment each other. MBAM is NOT an Antivirus program so you need one. Looks good here and thanks.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook
#8
Posted 19 April 2011 - 09:24 AM
Good deal glad you were able to get it fixed!!!
MalwareBytes is most definitely worth the money it’s a fantastic product! I also agree you should keep Avira
MalwareBytes is most definitely worth the money it’s a fantastic product! I also agree you should keep Avira
Share this topic:
Page 1 of 1

Help


Back to top










