Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hijacked And Safe Mode Is Disabled


  • Please log in to reply
1 reply to this topic

#1 bozz723

bozz723

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:44 AM

Posted 24 February 2006 - 08:37 PM

Hi all

My system is infected with an alcan.b virus and also had sasser. I removed most of the virus' with norton anti virus but there are still hidden system programs Norton wnt remove.

My safe mode has been disabled by this mystery trojan virus and it has also prevented my file sharing programs from connecting to their servers. My internet explorer is hijacked and will not let me access any website except beta.msn.com. My system restore does not work either as everytime I try to restore to an earlier point it fails.

The programs I use to access the internet (IE, firefox) were changed to access the internet thrugh some sort of proxy server. Firefox was changed because I imported IE's settings over to it. I fixed firefox's but IE's will not be changed.

None of myfile sharing programs will connect to the internet either, and also need sme help with this. Like I said earlier I can not access safe mode, as this virus has disabled it.

Herer are some of the process' i'm questionable about.
wuauclt.exe
ALCXMNTR.EXE
ccApp.exe
kbd.exe
ALMON.EXE
ALsvc.exe
spoolsv.exe
symlcsvc.exe
SPBBCSve.exe
SNDSrvc.exe
ccEvtMgr.exe
ccSetmgr.exe
NPFmntr.exe
alg.exe
smss.exe

I know alcan replicates, but norton said it removed it. My computer is hijacked to hell right now.

I have windows xp home, 3.0 ghz pentium 4


Any help is really really appreciated

BC AdBot (Login to Remove)

 


#2 River_Rat

River_Rat

  • Members
  • 773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Oklahoma - USA
  • Local time:03:44 AM

Posted 24 February 2006 - 10:57 PM

See this article:
Deleting Stubborn Files

See this article:
Taking out the trash

See this article:
The Parasite Fight


Have you tried a complete cleaning to see if that helps?

Show all Files & Folders
http://www.bleepingcomputer.com/forums/ind...showtutorial=62

Try these free tools.

Trendmicro (free virus scan only)
http://housecall.trendmicro.com/

Ewido (free Trojan Scan)
http://www.ewido.net/en/download/

Adware SE (update after installing)
http://www.lavasoftusa.com/software/adaware/

Spybot S&D (update after installing)
http://www.download.com/Spybot-Search-Dest...4-10122137.html


After doing this and the problems are not better feel free to post a HJT log.
Be sure to read the How to submit a HJT Log and submit it to the appropriate forum. HJT Forum links provided below.

How to submit a Hijackthis Log
http://www.bleepingcomputer.com/forums/How...s_Log-t956.html

HJT Forum
http://www.bleepingcomputer.com/forums/Hij...alysis-f22.html




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users