Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I need some help with malware


  • Please log in to reply
1 reply to this topic

#1 wildbill636

wildbill636

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:28 PM

Posted 15 November 2009 - 01:22 AM

So i attempted to download a video, It promped me to install a video player update, I installed it, and the computer has been messd up ever since. The primary problem is that when I go to a search engine I can search, but every link that comes up just redirects me to some random search or page. It usually goes to some health site. The only search engine I can use correctly is ASK.com. (minor problem, but very annoying)

Then I tried some virus removal freeware/trials. Here is where it gets tricky...Every antivirus or spyware remover I try ends up not working. It downloads and installs, but as soon as i start a scan, the program closes. When I re-open it I get the following message: "Windows cannot access the specified file path or you may not have the appropriate permissions to access the file." (i am the computer admin) there after that program is dead until I re-install it, but the same thing happens again. EVEN IN SAFE MODE!

I have installed every respectable antivirus (except Mcafee and Norton) with the same outcome. CWSshreader doesnt finda anything (it actually runs). HJS, DDS tool, and RootRepeal WILL NOT RUN!!!!!

I finally got Spyware Doctor to run a scan and it found several things, mostly low threat tracking cookies and a mid-level trojan. All were cleaned and nolonger show up when a scan is run. Several times I have had to restart in safe mode to get a scan to complete. Usually it will say the the software has been "deactivated" and prompt me to reactivate before the program will come to life.

I worry that this malware has enough smarts to outsmart the antivirus programs and I wonder what else it is doing to my computer (XP pro by the way). I would rather fix the issue than reformat. Any ideas that might fix my issues.

Thanks everyone!

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:03:28 PM

Posted 17 November 2009 - 08:32 PM

Please download Rkill by Grinler and save it to your desktop.Link 2
Link 3
Link 4
  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista, right-click on it and Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
Do not reboot the computer or you will have to run it again

====================================

Then try Root repeal again

=======================

Also try:
Please download Win32kDiag.exe by AD and save it to your desktop.
alternate download 1
alternate download 2
  • This tool will create a diagnostic report
  • Double-click on Win32kDiag.exe to run and let it finish.
  • When it states Finished! Press any key to exit..., press any key on your keyboard to close the program.
  • A file called Win32kDiag.txt should be created on your Desktop.
  • Open that file in Notepad and copy/paste the entire contents (from Starting up... to Finished! Press any key to exit...) in your next reply.
--------------------------------------


Go to Posted Image > Run..., then copy and paste this command into the open box: cmd
Click OK.
At the command prompt C:\>, copy and paste the following command and press Enter:
DIR /a/s %windir%\scecli.dll %windir%\netlogon.dll %windir%\eventlog.dll >Log.txt & START notepad Log.txt
A file called log.txt should be created on your Desktop.
Open that file and copy/paste the contents in your next reply.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users