Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I am infected


  • Please log in to reply
12 replies to this topic

#1 tuckered

tuckered

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:00 PM

Posted 27 February 2010 - 12:45 PM

When I log on to computer a window pops up Your computer may be at risk antivirus might not be installed. Also i get another window securty alert that computer is infected. I am uable to get on line.I tried to download Superantispyware to usb and download to computer.When I do this another window pops up says file is infected do you want to activate your antivirus software now? Another window pops upATTENTION! SPYWARE ALERT vulnerabilities found Your computer is infected by spyware-34 serious threats have been found etc. at bottom you have options of activate your antivirus software and stay unprotected. It also redirect you to another site this time Viagra.This is a Acer travelmate 2200 windows xp severice pack 3. Thank you so much for your help.

BC AdBot (Login to Remove)

 


#2 Haxalot

Haxalot

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:04:00 PM

Posted 27 February 2010 - 12:56 PM

safe mode :thumbsup:
thats the only word the "admin" let me say :D

#3 tuckered

tuckered
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:00 PM

Posted 27 February 2010 - 01:55 PM

Now in safe mode when i try to install superati a window pops up The system admin has set policies to prevent this installation. i am log in as admin.Also super cant be installed in safemode

Edited by tuckered, 27 February 2010 - 02:08 PM.


#4 tuckered

tuckered
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:00 PM

Posted 27 February 2010 - 04:35 PM

Please help

#5 Guest_Funnel Web_*

Guest_Funnel Web_*

  • Guests
  • OFFLINE
  •  

Posted 27 February 2010 - 06:44 PM

download malwarebytes anti malware and then load it on your computer. let it update and then let it do a quick scan, then remove what it finds, then reboot computer and go into safe mode, then perform a full scan and remove what it finds then reboot as normal. hopefully it can help you.

http://www.malwarebytes.org/mbam-download.php


#6 tuckered

tuckered
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male

Posted 27 February 2010 - 08:29 PM

Ok I tried that. Had to down load it in safe mode. I did scan and removed it. Booted back in regular mode. I was able to get a little futer at least I got to the screen to start the download of superanti. but was then block again with virus.wasnt able to update it though cause it wouldnt let me get online. Now trying to run avast.

#7 Sashacat

Sashacat

  • Members
  • 372 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 27 February 2010 - 09:36 PM

Hello :thumbsup:

Use ATF Cleaner:
http://www.atribune.org/index.php?option=c...5&Itemid=25
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
--------------------------------------------------------------------------------------------------------------
Run RKill:
http://www.technibble.com/rkill-repair-tool-of-the-week/

Rkill is a small, freeware and portable tool designed to terminate active malware processes allowing you to use other removal tools. Rkill is made by a Microsoft MVP “Lawrence Abrams” and is available in 4 different extensions. An .EXE, .COM, .SCR and a .PIF file.
The reason why Rkill comes in 4 different versions is because some malware will block .EXE files in an attempt to prevent you from running other malware removal tools, so this gets around that problem.

--------------------------------------------------------------------------------------------------------------
Scan with Malwarebytes'.
Read the ENTIRE ARTICLE:
How to use Malwarebytes' Anti-Malware to scan and remove malware from your computer
Posted by Grinler on February 16, 2010

http://www.bleepingcomputer.com/virus-remo...alware-tutorial

--------------------------------------------------------------------------------------------------------------
Scan with SUPERAntiSpyware.
Read the ENTIRE ARTICLE:
How to use SUPERAntiSpyware to scan and remove malware from your computer
Posted by Grinler on November 2, 2009

http://www.bleepingcomputer.com/virus-remo...pyware-tutorial

--------------------------------------------------------------------------------------------------------------

Please report back with the scan results logs for Malwarebytes' and SUPERAntiSpyware.
Copy/paste the ENTIRE CONTENTS of the scan logs into your next reply.
Also, please state what, if any, symptoms you are still experiencing.

If we don't change the direction we are going,
We are likely to end up where we are headed.

#8 tuckered

tuckered
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:00 PM

Posted 27 February 2010 - 11:22 PM

Ok thanks for reply!!! I ran rkill and the screen only poped up for a short while after I ran scan. nothing was stated only that it killed it. I am now running malwarebytes full scan.Is it nessary to run atf cleaner also?If so I can download that also and run it. I am following the post on Antivirussoft that wa posted on here. That is the screen that pops up.Remove Antivirus Soft (Uninstall Guide)

Edited by tuckered, 27 February 2010 - 11:26 PM.


#9 Sashacat

Sashacat

  • Members
  • 372 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 27 February 2010 - 11:34 PM

Hello :thumbsup:
ATF Cleaner does a great job of cleaning out trash/temp files on your computer.
It doesn't take up alot of room, or use alot of sytem resources.
It's not a program that runs on boot, or runs all the time.
You just use it when you need it.

I'm glad you found the specific removal guide for the Antivirus Soft:
Remove Antivirus Soft (Uninstall Guide)
Posted by Grinler on January 30, 2010

http://www.bleepingcomputer.com/virus-remo...-antivirus-soft

When I first replied to your topic, I wasn't sure which infection you had.

Report back with your scan results :flowers:
If we don't change the direction we are going,
We are likely to end up where we are headed.

#10 tuckered

tuckered
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:00 PM

Posted 27 February 2010 - 11:46 PM

Ok thanks everyone I hope that this problem is resolved. RKILL and malbytesware did there job very well.Thanks again.

#11 Sashacat

Sashacat

  • Members
  • 372 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 28 February 2010 - 12:08 AM

Be sure to post your scan results log (Malwarebytes') into your next reply.
Copy/paste the ENTIRE CONTENTS of the log.

You'll want to make sure the infections are completely removed.

Thanks :thumbsup:
If we don't change the direction we are going,
We are likely to end up where we are headed.

#12 whoishenry87

whoishenry87

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 01 March 2010 - 02:31 AM

rkill didn't work for me. I had trouble trying to run the program because everytime I download rkill.exe, .com, .scr, or .pif, I have a popup to download pev.rkexe which needed to specify which program I should run with. So I chose internet explorer for pev.rkexe to open with and I get multiple popups everytime I try to run rkill. Please help me!

Thanks!

#13 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:04:00 PM

Posted 02 March 2010 - 11:39 AM

whoishenry87
You have your own topic. Please stay with that

DO NOT OPEN the .exe

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users