Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus


  • Please log in to reply
11 replies to this topic

#1 zooter

zooter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 26 April 2011 - 01:42 PM

My computer will not start up normally. I get a blue screen saying to reboot in safe mode
I have to choose 'safe mode' for it to work. It said it removed a virus but it still will not start up normal. I also tried system restore to a older checkpoint but that didnt work
I am running windows XP

Edited by zooter, 26 April 2011 - 01:47 PM.


BC AdBot (Login to Remove)

 


#2 Computerproblem101

Computerproblem101

  • Members
  • 140 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 26 April 2011 - 02:01 PM

Http://www.malwarebytes.org

Download it, update it, run quick scan, remove anything found. Let me know if that worked.

#3 zooter

zooter
  • Topic Starter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 26 April 2011 - 02:25 PM

ok i ran the quick scan and it said
Scan type: Quick scan
Objects scanned: 158019
Time elapsed: 8 minute(s), 5 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#4 zooter

zooter
  • Topic Starter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 26 April 2011 - 02:53 PM

what next? it still is in safe mode

#5 zooter

zooter
  • Topic Starter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 01 May 2011 - 08:53 PM

now it says my computer is infected and wont let me run Malwarebytes' Anti-Malware. theres a small loc looking icon in the bottom right taskbar and it keeps telling me to use MS removal tool to remove virus

#6 Computerproblem101

Computerproblem101

  • Members
  • 140 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 01 May 2011 - 11:40 PM

Boot in safe mode with networking. Download Superantispyware from Http://www.superantispyware.com

Download>Update>Run Full Scan>Remove infections>Reboot back into normal mode>Run Malwarebytes quick scan

#7 Computerproblem101

Computerproblem101

  • Members
  • 140 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 01 May 2011 - 11:41 PM

Boot in safe mode with networking. Download Superantispyware from Http://www.superantispyware.com

Download>Update>Run Full Scan>Remove infections>Reboot back into normal mode>Run Malwarebytes quick scan

#8 zooter

zooter
  • Topic Starter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 02 May 2011 - 02:08 PM

Ok I Downloaded Superantispyware and followed your instructions

Ran Full Scan and it found 9 infections . I then Removed those infections

I Rebooted back into normal mode and ran Run Malwarebytes quick scan. Do you need me to post the log from that?
Thank you for your help

#9 zooter

zooter
  • Topic Starter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 17 May 2011 - 12:48 PM

The other issue Im having each day, when I boot up , in the lower right on the tray bar, there is a red shield with a white X in it, it says windows security alerts. to turn on auto updates but when I click on it to open windows security center, it wont let me turn on auto updates. Then when I run the SUPERantispyware it keeps finding this file System.BrokenFileAssociation. After I run the SUPERantispyware and remove that and then run the Malwarebytes' Anti-Malware it says nothing infected has been found until I reboot then it happens all over again.

Edited by zooter, 17 May 2011 - 01:33 PM.


#10 Mooseby

Mooseby

  • Members
  • 276 posts
  • OFFLINE
  •  
  • Local time:06:44 AM

Posted 17 May 2011 - 01:18 PM

Hi,
Wait three days and if no member of the Malware Response Team has responded then post here:
http://www.bleepingcomputer.com/forums/topic393863.html
Meanwhile post the log from the SAS scan and clean.

ETA: fixing typos

Edited by Mooseby, 17 May 2011 - 01:19 PM.


#11 zooter

zooter
  • Topic Starter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 17 May 2011 - 03:52 PM

where do I find the log from the SAS scan? I took a screenshot of whats been quarantined.not sure how to post that though either.
please advise

#12 zooter

zooter
  • Topic Starter

  • Members
  • 307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:44 AM

Posted 17 May 2011 - 04:14 PM

I found the logs from the 2 most recent SAS scans

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 05/16/2011 at 04:01 PM

Application Version : 4.52.1000

Core Rules Database Version : 6968
Trace Rules Database Version: 4781

Scan type : Complete Scan
Total Scan Time : 02:00:07

Memory items scanned : 495
Memory threats detected : 0
Registry items scanned : 8857
Registry threats detected : 1
File items scanned : 42079
File threats detected : 0

System.BrokenFileAssociation
HKCR\.exe
--------------------------------

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 05/17/2011 at 01:44 PM

Application Version : 4.52.1000

Core Rules Database Version : 6968
Trace Rules Database Version: 4781

Scan type : Complete Scan
Total Scan Time : 03:06:00

Memory items scanned : 517
Memory threats detected : 0
Registry items scanned : 8858
Registry threats detected : 1
File items scanned : 42134
File threats detected : 0

System.BrokenFileAssociation
HKCR\.exe

Edited by zooter, 17 May 2011 - 04:30 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users