Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Several Problems with Computer


  • Please log in to reply
6 replies to this topic

#1 Huy_N

Huy_N

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:12:37 AM

Posted 17 June 2009 - 11:47 PM

First of all I noticed that when I clicked on a link on google I got redirected to some other random site and I always see something like 78.41.205.57 or windowsclick.com and when I try to go there I get a blank page.

Then I downloaded Spybot S&D to fix this. It installed perfectly fine but when I doubleclicked on the shortcut the hourglass on the cursor appears but the program never loads.

Today my AVG reported that I had eight viruses all named Win32/Cryptor. I got something like:

\\?\globalroot\systemroot\system32\UACrnvspuxx.dll Virus found Win32/Cryptor Moved to Virus Vault
\\?\globalroot\systemroot\system32\UACrnvspuxx.dll Virus found Win32/Cryptor Infected
\\?\globalroot\systemroot\system32\UACrnvspuxx.dll Virus found Win32/Cryptor Infected
\\?\globalroot\systemroot\system32\UACrnvspuxx.dll Virus found Win32/Cryptor Infected
C:\WINDOWS\system32\svchost.exe (1544) Virus found Win32/Cryptor
C:\WINDOWS\system32\svchost.exe (1584) Virus found Win32/Cryptor Infected
C:\WINDOWS\system32\svchost.exe (1632) Virus found Win32/Cryptor Infected
C:\WINDOWS\system32\svchost.exe (1764) Virus found Win32/Cryptor Infected

When I tried to fix it with AVG is said:

File cannot be healed
Item with this value already exist in object

Used AVG command line scanner. The files above are healed.

I downloaded Malwarebytes' Anti-Malware. I tried to install it but when the bar gets to the middle and it says it's extracting files the setup just freezes at that point. I let the setup stay for a while and it got finished but then I click finish with the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware boxes checked the screen disappears and nothing happens. Renamed mbam.exe to mbam.bat so it works.

Can someone help me with this?

Edited by Huy_N, 18 June 2009 - 01:23 PM.


BC AdBot (Login to Remove)

 


#2 Vancouver_cpu_Geek

Vancouver_cpu_Geek

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:12:37 AM

Posted 18 June 2009 - 02:54 AM

Try running the programs in safe mode with networking if it fails in normal mode. Disable all the startup items if possible before you restart the machine in safe mode.

Edited by Vancouver_cpu_Geek, 18 June 2009 - 02:55 AM.


#3 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:03:37 AM

Posted 18 June 2009 - 09:29 AM

If mbam won't install or run

Some types of malware will disable MBAM and other security tools. If MBAM will not install, try renaming it. Right-click on the mbam-setup.exe file and change the .exe extension to .bat, .com, .pif, or .scr and then double-click on it to run.

If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files, right-click on mbam.exe and change the .exe as noted above. Then double-click on it to run.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#4 Huy_N

Huy_N
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:12:37 AM

Posted 18 June 2009 - 01:11 PM

I restarted my computer and started on Safe Mode but it didn't work. Then I tried renaming mbam.exe to mbam.bat and it worked! So I ran a quick scan when it launched. Also while I was in Safe Mode I ran AVG's command line scanner and it said it removed the viruses but I am still being redirected when I click on links in Google.

Edited by Huy_N, 18 June 2009 - 01:17 PM.


#5 Alex_Computer

Alex_Computer

  • Banned
  • 107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:37 AM

Posted 18 June 2009 - 01:16 PM

Lets try Kaspesky. Kaspersky is known for it's excellent detection ratings.

Please run the Kaspersky Virus Removal Tool. You can download it from here: http://downloads5.kaspersky-labs.com/devbu....2009_08-52.exe.

The instructions on how to run it can be found here: http://www.myantispyware.com/2009/03/26/ho...s-removal-tool/.

Please let us know what it found!

#6 Huy_N

Huy_N
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:12:37 AM

Posted 18 June 2009 - 01:20 PM

Lets try Kaspesky. Kaspersky is known for it's excellent detection ratings.

Please run the Kaspersky Virus Removal Tool. You can download it from here: http://downloads5.kaspersky-labs.com/devbu....2009_08-52.exe.

The instructions on how to run it can be found here: http://www.myantispyware.com/2009/03/26/ho...s-removal-tool/.

Please let us know what it found!

The links above don't work. It says 404 not found.

Edited by Huy_N, 18 June 2009 - 01:20 PM.


#7 Alex_Computer

Alex_Computer

  • Banned
  • 107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:37 AM

Posted 18 June 2009 - 01:27 PM

Lets try Kaspesky. Kaspersky is known for it's excellent detection ratings.

Please run the Kaspersky Virus Removal Tool. You can download it from here: http://downloads5.kaspersky-labs.com/devbu....2009_08-52.exe.

The instructions on how to run it can be found here: http://www.myantispyware.com/2009/03/26/ho...s-removal-tool/.

Please let us know what it found!

The links above don't work. It says 404 not found.



That one must have expired. Please use this one: http://downloads5.kaspersky-labs.com/devbu....2009_08-52.exe




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users