Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected - Help Can't use my computer at all - Urgent!


  • Please log in to reply
4 replies to this topic

#1 titans2010

titans2010

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 16 December 2010 - 11:03 PM

I have a Dell that I am running Windows Vista on. I am currently on my laptop because I can't use my computer. Anytime I click on any application or Internet Explorer I get a message that says:

"Application cannot be executed. The file xxxxxxx.exe is infected. Do you want to activate your antivirus software now?" Then it tries to connect me to the internet to buy an antivrus program. This happens on anything I try to do. I can't open anything, not even excel.

HELP PLEASE THIS IS URGENT! Many Thanks!

BC AdBot (Login to Remove)

 


#2 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:01:00 AM

Posted 16 December 2010 - 11:43 PM

Hello titans2010,

Posted Image

That's System Tool <_<

Let's disable the main file manually so you can run some tools. Do you have access to a flash drive?

What I want you to look for is in Application Data (If using XP, otherwise Program Data). There will be a folder, with a file in it of the same "name". This will appear random, but it has a pattern. Look for letters and numbers in this order: lower case, upper case, lower case, upper case, lower case, then 5 random numbers. For example:

Folder -----> pEeHl02508\pEeHl02508.exe <-----file inside

Delete the folder. Now, if you still have no access to the internet, download the following tool to a flash drive from a different computer, then put it on the infected one and run it.

This tool is not a toy. If used the wrong way you could trash your computer. Please use only under direction of a Helper. If you decide to do so anyway, please do not blame me or ComboFix.

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. IF YOU USE AVG IT MUST BE UNINSTALLED OR THIS WILL NOT RUN.

1. Download this file - combofix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2. Double click combofix.exe & follow the prompts.
3. When finished, it will produce a log for you. Post that log in your next reply please.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall.

If you have trouble running it the first time, then rename ComboFix.exe to titans.exe and try again.

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#3 titans2010

titans2010
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:00 AM

Posted 17 December 2010 - 12:19 AM

Thanks teacup for the quick response.

I am running Windows Vista. I can't find the file that you want me to delete. I have looked in my C drive where all my applications are, but maybe I'm looking in the wrong place. Where exactly should this file be?

Thanks again for your help, it is much appreciated.

#4 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:01:00 AM

Posted 17 December 2010 - 01:15 AM

Should be here, and remember this is just an example like above: C:\ProgramData\pEeHl02508\pEeHl02508.exe

or C:\Documents and Settings\All Users\Application Data (or Program Data)\

Edited by teacup61, 17 December 2010 - 01:18 AM.

Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#5 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:01:00 AM

Posted 27 December 2010 - 11:55 AM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users