Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Can't install Malwarebytes/multiple viruses


  • Please log in to reply
2 replies to this topic

#1 rods

rods

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:04:22 AM

Posted 01 February 2010 - 09:34 PM

Hello,

I have a WinXP SP3 machine that had Malwarebytes and Avira Free installed. Avira was continuously giving popup alerts for JS/Redirector.455 and other TR/'s I tried all of the options (Deny, Delete, etc) and clicked the checkbox to remember this action, but it would pop up again in a few seconds.

The computer now has the Internet Security 2010 rogue malware. I downloaded rkill, but the command prompt would say "Program is too big to fit in memory"

I tried to run malwarebytes and it would freeze up after 3 minutes. I tried this several times and finally was able to get it to scan for about 12 minutes and then all of a sudden the application closed. I went to go run it again and it said that it couldn't find the .exe. I checked the directory and sure enough the exe was deleted.

I uninstalled MB, rebooted my computer and then when I went to go install MB, it would give me the message that the Program is too big to fit in memory. I also changed the name of the install file to m.com, and still got the same message

I have no idea what to do now. I've been at the client's desktop all day and need to get this resolved ASAP.

PLEASE HELP.

Thanks!

BC AdBot (Login to Remove)

 


#2 rods

rods
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:04:22 AM

Posted 01 February 2010 - 09:40 PM

Oh and another thing I can not open task manager or enter Safe Mode. Everytime I try to get into safe mode I get a BSOD.

I then tried to create a test user with minimal access and logged on, and I was able to run taskmanager, open a command prompt and modify the registry. From here I'm able to kill the winlogon32.exe process which starts IS2010, but i still have a bunch of other viruses that are preventing me from doing anything. Also, my desktop isn't initialized at this point. If I try to run explorer, it'll display my desktop and the start button, but IS2010 will then kick off.

I'm unable to delete the files I need to under windows\system32 as I don't have the proper permissions.

#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:22 AM

Posted 01 February 2010 - 11:57 PM

Hello and welcome...

Desktop fix..

Click Ctrl + Alt + Del to get the task manager up.
On the 'Processes' tab find "explorer.exe" and end that process.
Your desktop will go away.
Click on the 'Applications' tab and click New Task.
Enter "explorer.exe" as the task to start.
Your desktop will then come back.
Now try to launch IE again.


As this infection deletes a core executable of Malwarebytes' we will need to download a new copy of it and put it in the C:\ tc... so please follow our Removal Guide here http://www.bleepingcomputer.com/virus-remo...t-security-2010

You will move to the Automated Removal Instructions for Internet Security 2010 using Malwarebytes' Anti-Malware:

After you completed that post your scan log here,let me know how things are.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users