Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan.FakeAlert just wont go away


  • This topic is locked This topic is locked
7 replies to this topic

#1 Vulgur

Vulgur

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:15 AM

Posted 19 August 2011 - 02:05 PM

Hey there! I am new to posting on forums for computer as 9 times out of 10 I can solve a problem by using wonderful forums like this one. In the last several days I have tried multiple solutions as posted here on and other sites. Heres the problem: Malwarebytes as well as spybot s and d, adaware, and Super AntiSpyware have all come up with one central problem, Trojan.FakeAlert. There might be multiple problems here but I will list whats going and what I have done so far to give you the broadest picture possible.

The Problems:

As I stated above Trojan.FakeAlert is being an illusive pain. For the most part now, after several fix attempts, the only problem its giving me is those pop-up alerts saying I am unprotected against malware or spyware etc etc represented with a yellow triangle with a ! in my task bar. When I started working on this machine it was plagued with browser redirects and the computer running really slow at boot as well as during normal computer activity. As of today the computer loads faster all around but I cant get task manager to stay open. As a work around I have copied the task manager and renamed it so I can see whats going on. Three processes seem to be eating up loads of CPU. The first two being Spybot S and D's tea timer as well as Malwarebytes' process detection/blocker. This occurs during start up as both programs attempt to block whatever the issue is, and this occurs every time several times over in reference to multiple processes and .exe files. Svchost.exe decideds to take up 100% of CPU from time to time as well.

What I have tried:

I have scanned and attempted to fix this problem with these programs: Malwarebytes, Spybot S and D, Adaware, Super Anti-Spyware, ATF Cleaner, ComboFix (as suggested in a previous topic), GooredFix, as well as several registry fixes as posted in previous topics about this problem. All programs have been used in safe mode (the ! yellow triangle warning persists even in safe mode) as well as regular windows. All have removed problems and required reboots but nothing is actually fixing the problem. I ran ComboFix last night and it stopped working once it got to the deleting files stage.

I hope I have listed everything! In my 10 years of amateur computer repair experience I have never met a problem so difficult to remove as this. I am hoping someone out there can help me as my next step will be to re-install windows. Thanks in advance.

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:05:15 AM

Posted 19 August 2011 - 02:13 PM

Hello having run ComboFix we need to see that and a DDS log.

Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
Skip the GMER step and instead post the ComboFix log you have.

Let me know if that went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Vulgur

Vulgur
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:15 AM

Posted 19 August 2011 - 02:38 PM

Saved DDS to my desktop, ran it, cmd prompt screen disappeared, waited three minutes, nothing happened, and that was after using defogger.

#4 Vulgur

Vulgur
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:15 AM

Posted 19 August 2011 - 02:39 PM

OH and the combo fix log. Not sure where to find that or if one was created as I had to restart the computer. After several hours it was still stuck stuck at the "deleting folders" stage.

#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:05:15 AM

Posted 19 August 2011 - 02:45 PM

If you cannot get DDS to work, please try this instead.

Please download RSIT by random/random from the link provided for your operating system and save it to your desktop.
Link 1 for 32-bit version
Link 2 for 32-bit version

Link 1 for 64-bit version
Link 2 for 64-bit versionThis tool needs to run while the computer is connected to the Internet so it can download HijackThis if it is not located on your system. If you get a warning from your firewall or other security programs regarding RSIT attempting to contact the Internet, please allow the connection.

  • Close all applications and windows so that you have nothing open and are at your Desktop.
  • Double-click on RSIT.exe to start the program.
    If using Windows Vista, be sure to Run As Administrator.
  • Read the disclaimer and click Continue.
  • When the scan is complete, a text file named log.txt will automatically open in Notepad.
  • Another text file named info.txt will open minimized.
  • Save the log files to your desktop and copy/paste the contents of log.txt by highlighting everything and pressing Ctrl+C.
  • After highlighting, right-click, choose Copy and then paste the contents into a new topic in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here.
  • Copies of both log files are automatically saved in the C:\RSIT folder which the tool creates during the scan.
-- Note: Do not post the contents of info.txt in your reply. Instead, just include it as an attachment to upload using the "Browse" button in the text editor when making your reply.

Important: Be sure to mention that you tried to follow the Prep Guide but were unable to get DDS to run. If RSIT did not work, then reply back here.


Include this link to this topic,
http://www.bleepingcomputer.com/forums/topic415184.html/page__pid__2378467#entry2378467
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:05:15 AM

Posted 19 August 2011 - 02:55 PM

They will have to find where it went if it exists.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 Vulgur

Vulgur
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:15 AM

Posted 19 August 2011 - 03:12 PM

That worked and I posted it where you said. Thanks!

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:05:15 AM

Posted 19 August 2011 - 03:17 PM

Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Removal Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the Malware Removal Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the Malware Removal Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the Malware Removal Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRL Team member is already assisting you and not open the thread to respond.

To avoid confusion, I am closing this topic.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users