Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need to do a Registry Repair


  • Please log in to reply
11 replies to this topic

#1 Raner

Raner

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 25 September 2009 - 01:03 PM

hi all
Truned on my work computer and it started loaded three porn sites on its own,then got the kiss of death,rebooted and got it going but my windows xp log in changed and when I try to run the virus scaner the path is gone,tryed to reinstalled the malwarebytes from my downloads but it gets blocked can't install it,I also have avast and it blocked also anybody got any ideas how to get my pc going.And one more thing can't get in on safe mode either. thanks Raner!

Edited by Raner, 25 September 2009 - 01:07 PM.


BC AdBot (Login to Remove)

 


#2 Raner

Raner
  • Topic Starter

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 25 September 2009 - 04:43 PM

hey guys got one of my scaners to work for a bit before the virus cut it off.It found a trogan name is FakeAlert.BMG.BUT when I try to move it to valt it wont let the scaner move it just get no action taken.

#3 Raner

Raner
  • Topic Starter

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 26 September 2009 - 09:28 PM

HI All
I realy need some help from somebody out there,I got this virus on my work computer and I don't know how it got in but it is killing me.I brought the pc home and got so mad after messing with it could not get no info so I did a fresh reinstall saved some files I needed and got almost to the end of getting done and guess what it is back moving like a bat out of hell,and this thing is smart it inserts it's on log on and there is no way around it if you want to get in the pc,controls all the virus scaners and won't you download new ones,to mention just a few things it messes up.The thing is if I do another fresh reinstall how can I prevent it from getting me again.But I'll do what ever it takes to get rid of this virus and keeping it away.thanks Raner

#4 Raner

Raner
  • Topic Starter

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 27 September 2009 - 07:42 AM

hi again,I think I'm gaining on this problem I saw another post that was close to the problem I'm having so I followed the instrutions as to what to do and downloaded Dr.web cureit software to a thumb drive on my other computer and installed it on the work computer and the virus did not cut me off.I had 1779 virus in about to 3 hours after the fresh windows xp reinstall,here is a portion of the Dr.Web Cureit log:

iexplore.exe;c:\program files\internet explorer;Win32.Virut.56;Cured.;
msmsgs.exe;c:\program files\messenger;Win32.Virut.56;Cured.;
setup50.exe;c:\program files\outlook express;Win32.Virut.56;Cured.;
qttask.exe;c:\program files\quicktime;Win32.Virut.56;Cured.;
explorer.exe;c:\windows;Win32.Virut.56;Cured.;
unregmp2.exe;c:\windows\inf;Win32.Virut.56;Cured.;
svchost.exe;c:\windows;Win32.Virut.56;Cured.;
svchust.exe;c:\windows;Win32.Virut.56;Cured.;
cisvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
clipsrv.exe;c:\windows\system32;Win32.Virut.56;Cured.;
ctfmon.exe;c:\windows\system32;Win32.Virut.56;Cured.;
dllhost.exe;c:\windows\system32;Win32.Virut.56;Cured.;
dmadmin.exe;c:\windows\system32;Win32.Virut.56;Cured.;
ie4uinit.exe;c:\windows\system32;Win32.Virut.56;Cured.;
imapi.exe;c:\windows\system32;Win32.Virut.56;Cured.;
locator.exe;c:\windows\system32;Win32.Virut.56;Cured.;
logon.scr;c:\windows\system32;Win32.Virut.56;Cured.;
logonui.exe;c:\windows\system32;Win32.Virut.56;Cured.;
mnmsrvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
msdtc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
msiexec.exe;c:\windows\system32;Win32.Virut.56;Cured.;
netdde.exe;c:\windows\system32;Win32.Virut.56;Cured.;
ntsd.exe;c:\windows\system32;Win32.Virut.56;Cured.;
nvsvc32.exe;c:\windows\system32;Win32.Virut.56;Cured.;
nwiz.exe;c:\windows\system32;Win32.Virut.56;Cured.;
regsvr32.exe;c:\windows\system32;Win32.Virut.56;Cured.;
rsvp.exe;c:\windows\system32;Win32.Virut.56;Cured.;
scardsvr.exe;c:\windows\system32;Win32.Virut.56;Cured.;
sessmgr.exe;c:\windows\system32;Win32.Virut.56;Cured.;
shmgrate.exe;c:\windows\system32;Win32.Virut.56;Cured.;
smlogsvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
tlntsvr.exe;c:\windows\system32;Win32.Virut.56;Cured.;
ups.exe;c:\windows\system32;Win32.Virut.56;Cured.;
userinit.exe;c:\windows\system32;Win32.Virut.56;Cured.;
vssvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
winmgmt.exe;c:\windows\system32\wbem;Win32.Virut.56;Cured.;
wmiapsrv.exe;c:\windows\system32\wbem;Win32.Virut.56;Cured.;
UWAKEOFF.EXE;C:\DELL;Win32.Virut.56;Cured.;
UWAKEON.EXE;C:\DELL;Win32.Virut.56;Cured.;
cmd.execf;C:\Documents and Settings\RRG-ONE\Local Settings\Temp;Win32.Virut.56;Cured.;
sssvchost[1].exe;C:\Documents and Settings\RRG-ONE\Local Settings\Temporary Internet Files\Content.IE5\I92L0H8B;Trojan.DownLoad.47525;Deleted.;
winpok6.exe;C:\Documents and Settings\RRG-ONE\Start Menu\Programs\bdpw6;Win32.Virut.56;Cured.;
winpok6.exe;C:\Documents and Settings\RRG-ONE\Start Menu\Programs\bdpw6;Win32.Virut.56;Cured.;
nvudisp.exe;C:\NVIDIA\Win2KXP\93.71;Win32.Virut.56;Cured.;
DotNetInstaller.exe;C:\Program Files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32;Win32.Virut.56;Cured.;
msinfo32.exe;C:\Program Files\Common Files\Microsoft Shared\MSInfo;Win32.Virut.56;Cured.;
msinfo32.exe;C:\Program Files\Common Files\Microsoft Shared\MSInfo;Win32.Virut.56;Cured.;
sapisvr.exe;C:\Program Files\Common Files\Microsoft Shared\Speech;Win32.Virut.56;Cured.;
iedw.exe;C:\Program Files\Internet Explorer;Win32.Virut.56;Cured.;
icwconn1.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Virut.56;Cured.;
icwconn2.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Virut.56;Cured.;
icwrmind.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Virut.56;Cured.;
icwtutor.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Virut.56;Cured.;
inetwiz.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Virut.56;Cured.;
isignup.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Virut.56;Cured.;
I can supply the whole log if someone needs to see it.

As I said 1779 virus's in about three hours that has got to be so sort of record,well everything seems to be working OK but 3\4 of my control panel Icons are not working and notepad is not working either,does anyone have any Ideas as to how to repair this problems and if I have to do anything else as far as the virus's go.thanks Raner!

#5 Raner

Raner
  • Topic Starter

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 27 September 2009 - 10:24 AM

Hey all
I did not want to start a new post but I have a question.If I use the windows xp install disc to do a repair will I be asked to activate with the activation key again?The reason I'm asking is because I don't want to get in the never ending loop of windows is activated and after you hit OK the next window that comes up is windows needs to be activated,I've run in to this before and the only way I got it to work was with a fresh reinstall.The reason for the repair that I remove 1779 virus's and the registry needs to be repaired,have 3/4 of the Icons on the control panel that won't open such as add and remove,Automatic updates,Date and Time,Display,Games and Controlers,just to name a few.Thanks for the help Raner

#6 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:30 AM

Posted 27 September 2009 - 11:16 AM

The Dr. Web log in your other post shows Virut
It may say it's deleted but chances are slim to none that it isn't
A repair install won't cut it. You need to reformat and reinstall clean
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#7 Raner

Raner
  • Topic Starter

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 27 September 2009 - 11:28 AM

Thanks for the come back Garmanma But what you came back with is not what I wanted to hear if you know what I mean hah!hah!,well I guess if it has to be done now is a good a time as any,heck I just did it yesterday so this one should go pretty smooth,one more thing if it's not to much trouble,I liked Dr.Webb Tool works real well,what is a good firewall software that I can install to prevent another virus like the one that got me from getting me again Thanks again Raner

Edited by Raner, 27 September 2009 - 11:29 AM.


#8 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:30 AM

Posted 27 September 2009 - 08:02 PM

I'm sorry for the bad news, but Virut is one of those viruses that you're better off to erase and start over
Good luck
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#9 Raner

Raner
  • Topic Starter

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 28 September 2009 - 06:49 AM

Well got it done it took about 2 hours to redo,everything is working ok and what is a good firewall avg.did not cut it on this one,need to change to something better any ideas of what to use.I got access to Bit Defender but don't know if it any better than AVG.Thanks Raner

Edited by Raner, 28 September 2009 - 06:50 AM.


#10 hamluis

hamluis

    Moderator


  • Moderator
  • 55,253 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:30 AM

Posted 28 September 2009 - 09:59 AM

The Windows firewall is more than adequate for many users.

The only variability that I've seen between the firewalls that I've employed/tried...lies with personal preferences of user, not with ability to protect the system in a standard way.

I'm curious as to how/why you arrived at the conclusion...that your firewall choice led to your infection.

Louis

#11 Raner

Raner
  • Topic Starter

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 28 September 2009 - 09:23 PM

hey hamluis
Heck I'm trying cover all the bases,I had not downloaded any files,I had no emails ,all the programs had been in computer for at least a week,I was quit busy last week so all I used the computer for was for business the only program I had been using was excel.The thing is all I did was turn on the pc and went to check on some stuff in the shop,came back to check on a customer receipt and there was three porn Icons that I had never see before.I am a one operation so I know I did not go on the net,however some one could have come in from the racing shop next door and used my pc,I ask the two other guys that work on there cars at night but they did not know anything about my pc. So I just don't know if they used it or not I never lock the door,nothing of value in there after I leave.The other thing was when I ran a scan with avg. all I was getting was forgot the excact verbish but was something like files were white lettered and could not do anything.I came on this site posted for some help and then I saw a post close to the problem I was having so I followed it and downloaded Dr.Web Cureit and it did a great job repaired 1775 virus and 4 trojans,I liked what I saw,I was trying to find a firewall that works just as well.Avg is my firewall according to the popup that warns of virus treads.That is all the story in a nutshell.Raner

Edited by Raner, 28 September 2009 - 09:26 PM.


#12 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Staff Emeritus
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:07:30 AM

Posted 28 September 2009 - 09:58 PM

Exactly which AVG product do you have?
AVG free or one of the paid versions?

AVG free is antivirus only.
Paid versions would be AVG Anti-Virus plus Firewall OR AVG Internet Security which contains firewall, antivirus, and a few other features.
You mention getting notified of virus threats, so I suspect you mean AVG free antivirus.
At the moment you are confusing the functions of a firewall and antivirus.

You need to have both antivirus and firewall. Do you currently have a firewall or have the Windows firewall turned on?
If not turn enable it OR find a 3rd party software firewall.

Suggestions for free products for both can be found here:
http://www.bleepingcomputer.com/forums/topic3616.html

I have used AVG free antivirus in the past and had no problems with it.
Currently I use Avast free antivirus.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users