Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Infected with something that won't let me run HiJackThis orMalewarebytes

  • Please log in to reply
4 replies to this topic

#1 indeeptrouble


  • Members
  • 3 posts
  • Local time:06:04 AM

Posted 30 August 2009 - 02:37 PM

It's my first time here. I was initially infected with something called Protection System, which kept warning me about fake viruses and spywares. I managed to uninstall it and I also disabled something called 'b' and '11224214'. The pop ups kept coming then I disabled 'tolataga.dll' and nizuputa.dll' from startup. These two keep showing up in a new copy as enabled. However the fake antivirus popups stopped. Now the computer is just slow and I get occasional pop-ups. I couldn't finish installation of Malewarebytes, and it won't let me run HiJackThis. I installed combofix (after renaming it combo-fix.exe) but I don't know how to use it. I tried running DDS but it didn't start scanning. Even after I disabled my antivirus from startup and disconnected from internet DDS still didn't run the scan. I tried even in Safe Mode to run DDS and it didn't scan. PLEASE HELP!!

Edited by indeeptrouble, 30 August 2009 - 09:41 PM.

BC AdBot (Login to Remove)


#2 garmanma


    Computer Masochist

  • Staff Emeritus
  • 27,809 posts
  • Location:Cleveland, Ohio
  • Local time:06:04 AM

Posted 30 August 2009 - 08:32 PM

Please download RSIT by random/random and save it to your Desktop.
Note: You will need to run this tool while connected to the Internet so it can download HijackThis if it is not located on your system. If you get a warning from your firewall or other security programs regarding Rist attempting to contact the Internet, please allow the connection.
  • Close all applications and windows so that you have nothing open and are at your Desktop.
  • Double-click on RSIT.exe to start the program.
  • If using Windows Vista, be sure to Run As Administrator.
  • Click Continue after reading the disclaimer screen.
  • Leave the drop down box set to default: "List/folders created or modified in the last 1 month (30 days).
  • When the scan is complete, a text file named log.txt will automatically open in Notepad.
  • Save the log file to your desktop and copy/paste the contents into a new topic in the HijackThis Logs and Malware Removal forum, NOT here.
Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run.
If RSIT did not work, then reply back here.
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 indeeptrouble

  • Topic Starter

  • Members
  • 3 posts
  • Local time:06:04 AM

Posted 30 August 2009 - 09:53 PM

Thanks for replying promptly. I tried to ran RSIT.exe as you said. However in the middle of the scan it stopped and just closed. Never opened a log.txt file. I tried to run it again but then it said: 'Windows cannot access the specific device, path or file. You may not have the appropriate permissions to access the item.' Needles to say that I'm using XP and not Vista, and I'm the sole user of this computer... Any other suggestions??

#4 indeeptrouble

  • Topic Starter

  • Members
  • 3 posts
  • Local time:06:04 AM

Posted 31 August 2009 - 02:28 AM

Does anyone have some suggestions? I saw someone with a very similar problem in another topic. I tried to run RootRepeal as suggested there but couldn't get it to work either.


#5 DaChew


    Visiting Alien

  • Members
  • 10,317 posts
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:06:04 AM

Posted 31 August 2009 - 06:16 AM

See if you can get a rootrepeal scan to work if you just select drivers?

Also I would like you to try this scan.

1. Download Win32kDiag from any of the following locations and save it to your Desktop



2. Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
3. When it states "Finished! Press any key to exit...", press any key on your keyboard to close the program.
4. Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic.

No. Try not. Do... or do not. There is no try.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users