Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Multiple Spyware Removal problems


  • Please log in to reply
1 reply to this topic

#1 JoJoArev

JoJoArev

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:59 PM

Posted 15 October 2009 - 10:02 PM

Hello all,

I am currently having trouble removing some serious spyware on a friends computer. He originally called me because he had Windows police pro keeping him from using his computer. I took a flash drive over there and started running some of the normal stuff like Hijack This, Adaware, and Malwarebytes. Each program started to install and run and each one cut off in the middle and then would not let me restart the program. I finally did some manual removal work and thought I had deleted it and then Antivirus 2010 popped up and started causing problems. I was finally able to download Super Anti-Spyware which I had used before to remove Antivirus pro and was able to get the program started scanning. It detected numerous Trojans and infections and then it did the same thing and cut off in the middle of the scan and now will not let me run it again. I get an error like no permission to use or something to that effect. I recognize some of the trojans and they are some pretty tough ones. I saw Trojan Vundo, AntiVirus 2010, Windows Police Pro, AntiSpywar 2009, and Advanced Virus Removal. I am not sure if they are all part of the same piece of spyware or a bunch of different ones, but I know I have tried running as many different spyware removal programs to delete them. I felt I had it with Super Anti-Spyware and also feel Malwarebytes would fix it but I can no longer get those programs to run from the computer or my flash drive. I have tried renaming the install and exe files and have tried downloading fixexe.reg which I thought might help me be able to run malwarebytes. Anyways, I am going crazy trying to fix this and any advice would be greatly appreciated.

Thanks,
JoJo

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:07:59 PM

Posted 16 October 2009 - 09:26 AM

Welcome to BC


:trumpet:

We Need to check for Rootkits with RootRepeal
  • Download RootRepeal from the following location and save it to your desktop.
  • Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
  • Open Posted Image on your desktop.
  • Click the Posted Image tab.
  • Click the Posted Image button.
  • Check all seven boxes: Posted Image
  • Push Ok
  • Check the box for your main system drive (Usually C:), and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the Posted Image button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

----------------------------------

Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to High

==========================

:flowers:

Please download Win32kDiag.exe by AD and save it to your desktop.
alternate download 1
alternate download 2
  • This tool will create a diagnostic report
  • Double-click on Win32kDiag.exe to run and let it finish.
  • When it states Finished! Press any key to exit..., press any key on your keyboard to close the program.
  • A file called Win32kDiag.txt should be created on your Desktop.
  • Open that file in Notepad and copy/paste the entire contents (from Starting up... to Finished! Press any key to exit...) in your next reply.
--------------------------------------


:thumbsup: Go to Posted Image > Run..., then copy and paste this command into the open box: cmd
Click OK.
At the command prompt C:\>, copy and paste the following command and press Enter:
DIR /a/s %windir%\scecli.dll %windir%\netlogon.dll %windir%\eventlog.dll >Log.txt & START notepad Log.txt
A file called log.txt should be created on your Desktop.
Open that file and copy/paste the contents in your next reply.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users