BleepingComputer.com: OpenCloud Security virus

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

OpenCloud Security virus

#1 User is offline   squeaks70 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 9
  • Joined: 20-September 11
  • Gender:Female

Posted 20 September 2011 - 12:45 PM

Hope I'm in the right place. My computer at home has the OpenCloud Security virus. It has since stopped all the pop up boxes and messages. I can now only boot the computer in Safe Mode, it will not allow the computer any further. I printed the uninstall guide from this website yesterday from work to try it out. When I'm in Safe Mode with Networking most times my icons do not come up and I get a Windows error message. With determination I kept trying and the icons eventually came up. As instructed, I changed the Proxy server settings and can not get the Internet Explorer to come up, it's like I don't have an internet connection at all. But I know it's working. I've gone back and attempted this step several times. I can't download anything and I'm stuck. Can you help me?

#2 User is offline   Broni 

  • The Coolest BC Computer
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 22,167
  • Joined: 01-February 08
  • Gender:Male
  • Location:Daly City, CA

Posted 20 September 2011 - 09:58 PM

Start here: http://www.bleepingcomputer.com/virus-removal/remove-opencloud-antivirus, or here: http://www.bleepingcomputer.com/virus-removal/remove-opencloud-security depending on which one you have.
My Website

Posted Image

My help doesn't cost a penny, but if you'd like to consider a donation, click Posted Image




#3 User is offline   squeaks70 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 9
  • Joined: 20-September 11
  • Gender:Female

Posted 21 September 2011 - 09:06 AM

Hi Broni,

Thank you for responding. I have the OpenCloud Security virus. I made 2 different copies of the Rkill on CD's before I left work. I tried the iexplore.exe first and downloaded it to the computer. I tried to get it to open probably 100 times and I had just as many error messages on the screen and did not close them. A couple of times I would see the DOS screen flash for a second as it was trying but never caught. So I tried the 2nd CD with the eXployer.exe. I had the same responses. Though I now receive the blue screen saying "PAGE_FAULT_IN_NONPAGED_AREA".
I followed all the instructions and can not get past this. I did keep checking the Proxy settings and they remained unchecked as per the instructions. I am determined to fix this, I just need a little guidance. I have many pictures on my computer and really need them back.

Thank you for your help,
squeaks70

#4 User is offline   Broni 

  • The Coolest BC Computer
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 22,167
  • Joined: 01-February 08
  • Gender:Male
  • Location:Daly City, CA

Posted 21 September 2011 - 07:14 PM

With the information you have provided I believe you will need help from the malware removal team.
Please make sure that you read the information about getting started first.
Then start a new thread HERE and include or required logs.
Including a link to this thread will be helpful.

Good luck and be patient. Help is on the way!
My Website

Posted Image

My help doesn't cost a penny, but if you'd like to consider a donation, click Posted Image




#5 User is offline   nasdaq 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 5,053
  • Joined: 16-June 06
  • Gender:Male
  • Location:Montreal, QC. Canada

Posted 28 September 2011 - 08:19 AM

From your previous topic.

Quote

Though I now receive the blue screen saying "PAGE_FAULT_IN_NONPAGED_AREA".


Can you boot in Safe Mode with Internet Connection?

The infection may have corrupted an Operating System file and you no longer are able to get into Normal Mode.

Which operating system do you have on this infected computer, XP, Vista, Windows 7?

When you start the computer do you at the very beginning of the boot have an option to enter some option using the Esc key or an Fx key.

In Vista and Wndows 7 you may have an option to use a previous good configuration.

Please let me know what options you see.

#6 User is offline   squeaks70 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 9
  • Joined: 20-September 11
  • Gender:Female

Posted 28 September 2011 - 08:34 AM

Most times when I try to boot in Safe Mode w/Internet connection it does not work, and I receive a Windows Error message box, I wrote them down but forgot to bring them with me. I shut off the computer and try again, sometimes I get lucky and it boots up w/the icons but no internet. Even when I try to just login as I normally would it automatically takes it to Safe Mode.

I'm running XP.

I have the F2 F12 and F8 for Safe Mode.

It's like the virus knows what I am going to do or try, before I even do it.

#7 User is offline   CarolynF 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 6
  • Joined: 27-September 11

Posted 29 September 2011 - 05:34 PM

I got to the scan portion of the fix. Malware bytes begins to scan and then just shuts off. I never get a list of infected items. I was running it in safe mode. Any suggestions?

#8 User is offline   squeaks70 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 9
  • Joined: 20-September 11
  • Gender:Female

Posted 01 October 2011 - 03:48 PM

Hi nasdaq, just wondering if you founf anything since my last post. Still having the same issues.

Thanks,squeaks70

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users