Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help! My comp has been taken over!


  • Please log in to reply
5 replies to this topic

#1 matan

matan

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:28 AM

Posted 21 July 2009 - 01:10 PM

The computer only starts windows about once every three times I reboot. Music comes out of my speakers out of nowhere with no programs running! "They" hijacked my desktop with warnings and fake security advice and made me pay to remove all the fake "viruses" and now my comp barely works. I have tried to download malwarebytes and avg and a variety of other programs but they will not open properly. I even purchased spyware doctor but it hasn't helped at all. Please Help! I have a hijack this log if that will help.

Edited by matan, 21 July 2009 - 01:14 PM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,602 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:28 PM

Posted 21 July 2009 - 01:50 PM

DDS/HijackThis logs are not permitted in this forum. The HJT Team members are all volunteers who contribute to helping members as time permits but currently there is a backup and you may have to wait for assistance. Referrals are made to the HJT forum if we cannot assist you here and we need to use more powerful tools or you don't mind waiting.

Some types of malware will disable Malwarebytes Anti-Malware and other security tools. If MBAM will not install, try renaming it first.
  • Right-click on the mbam-setup.exe file file and rename it to mysetup.exe.
  • Double-click on mysetup.exe to start the installation.
  • If that did not work, then try renaming and changing the file extension. <- click this link if you do not see the file extension
  • Right-click on the mbam-setup.exe file, rename it to mysetup and change the .exe extension to .scr, .com, .pif, or .bat.
  • Then double-click on mysetup.scr (or whatever extension you renamed it) to begin installation.
If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files.
  • Right-click on mbam.exe, rename it to myscan.exe.
  • Double-click on myscan.exe to launch the program.
  • If that did not work, then try renaming and change the .exe extension in the same way as noted above.
  • Double-click on myscan.scr (or whatever extension you renamed it) to launch the program.
If using Windows Vista, refer to How to Change a File Extension in Windows Vista.

Be sure to update MBAM through the program's interface (preferable method), then perform a Quick Scan in normal mode and check all items found for removal. Don't forgot to reboot afterwards. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. When done, click the Logs tab and copy/paste the contents of the report in your next reply.

Note: MBAM uses Inno Setup instead of the Windows Installer Service to install the program. If installation fails in normal mode, try installing and scanning in safe mode. Doing this is usually not advised as MBAM is designed to be at full power when running in normal mode and loses some effectiveness for detection & removal when used in safe mode. For optimal removal, normal mode is recommended so it does not limit the abilities of MBAM. Therefore, after completing a scan it is recommended to uninstall MBAM, then reinstall it in normal mode and perform another Quick Scan.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 matan

matan
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:28 AM

Posted 21 July 2009 - 05:12 PM

Thanks for the advice. I REALLY appreciate the help.
I tried renaming malwarebytes as well as changing the .exe suffix and when I try to open it it asks me what program I would like to use to open it and when I click on the renamed icon in my program files nothing happens. The installation worked fine (I think) but now the last screen of the installation Wizard is frozen on the desktop and I can't close it. Music still comes out of my speakers at random times and the whole comp is running incredibly slow. Thanks again for your help

Edited by matan, 21 July 2009 - 05:12 PM.


#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,602 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:28 PM

Posted 22 July 2009 - 06:41 AM

Did you try installing and running in safe mode?

Will other .exe programs run?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 matan

matan
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:28 AM

Posted 23 July 2009 - 09:26 PM

No, know I can't run any programs except for firefox

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,602 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:28 PM

Posted 24 July 2009 - 07:25 AM

Firefox is and .exe process so apparently all of them are not affected which is usually the case with some types of malware infection.

Please download and scan with Dr.Web CureIt - alternate download link.
Follow these instructions for performing a scan in "safe mode".
If you cannot boot into safe mode or complete a scan, then try doing it in normal mode. Be aware, this scan could take a long time to complete.
-- Post the log in your next reply. If you can't find the log, try to write down what was detected/removed before exiting Dr.WebCureIt so you can provide that information.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users