Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

redirecting virus? also fake alert? please help


  • Please log in to reply
5 replies to this topic

#1 jesserobert007

jesserobert007

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:09:36 PM

Posted 11 January 2010 - 09:38 PM

my ip keeps being redirected and you com is infected keeps popping up... mcafee also pops up here and there and says it blocked and dleted a trojan(dont remember the name it gave) and today my com restartd twice by itself any help out there

BC AdBot (Login to Remove)

 


#2 trev47

trev47

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:36 PM

Posted 11 January 2010 - 10:49 PM

Try downloading rkill to your desktop from one of the following links. Double click the file and a black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully. If it does not work, then download the next file and try again.
try this one http://download.bleepingcomputer.com/grinler/rkill.pif
or this http://download.bleepingcomputer.com/grinler/rkill.scr
or this http://download.bleepingcomputer.com/grinler/rkill.exe
or this http://download.bleepingcomputer.com/grinler/rkill.com


Now, download Malwarebytes from http://malwarebytes.org/ update it and run a full scan. Remove any infections found and post the results in your next reply.

#3 jesserobert007

jesserobert007
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:09:36 PM

Posted 12 January 2010 - 09:22 PM

thanks for responding i did all you said not sure how to use rkill but malwares found 8 infections but didnt complete full scan because my com shut down again by itself. ran a quick search and found 7 di it destroy them,quarentine them, or do i have to do something else?still getting redirected trying to run full scan.. it did block some start up programs(good or bad?idk) keep getting mcafee popup saying it blocked and deleted a trojan fake alert cpa. any other ideas would be appreciated

#4 trev47

trev47

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:36 PM

Posted 12 January 2010 - 10:40 PM

Can you post the log from Malwarebytes? Also to run rkill. Download the file in the first link to your desktop. Once it is on the desktop, double-click it to run it. A black DOS box will briefly flash on the screen and then disappear. This is normal and indicates the tool ran successfully. If it does not work, then download the next file and try again.

You can get good directions for running Malwarebytes from the guide at http://www.bleepingcomputer.com/virus-remo...ve-sysdefenders
You will need to scroll down to the heading titled "Automated Removal Instructions for SysDefenders using Malwarebytes' Anti-Malware:"
Follow the instructions but instead of a full scan do a quick scan. Post the log when finished.

Also, I am not trying to tell you that have been infected with Sysdefenders. The guide just has good directions for running malwarebytes.

Trev

#5 jesserobert007

jesserobert007
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:09:36 PM

Posted 12 January 2010 - 11:24 PM

thanks again for replying. ive been doing some research i ran super antispyware and it had 126 threats they are quarantined. malwarebytes on quick search came up with nothing (which is good...last time was 7) on full scan there is still one left so far an hour into scanning(fingers crossed) ill post findings.. still getting "trojan removed pop up fake alert-cpa". I havent checked the ok box seems like when i do that a couple of times(it keeps popping up) my com gets shut down. I think were making progress thanks

#6 trev47

trev47

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:36 PM

Posted 16 January 2010 - 09:46 PM

Sorry for not responding sooner.
Can you post any of your logs from SAS?

Next run a scan at http://www.eset.com/onlinescan/

Are you still having issues?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users