Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

pc defender virus, no safe mode


  • Please log in to reply
6 replies to this topic

#1 hyperbaladia

hyperbaladia

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:28 PM

Posted 06 December 2012 - 08:17 PM

I have very limited knowledge here.
It is cancelling any program I try to open (including the ones recommended by bleepingco.). Instead of safe mode, it opens a screen of system32 descriptions. Do I find an xp disc and start over? It is my parents old computer, so they are scared of this idea of some person acquiring all their information. -.-
Help would be much appreciated

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,658 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:01:28 PM

Posted 06 December 2012 - 08:26 PM

I'll report this topic to appropriate hekpers.
Hold on....

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,912 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:28 PM

Posted 06 December 2012 - 08:26 PM

Hello and welcome. I moved this from XP to the Am I Infeted forum.

Please folow this guide Remove PC Defender Plus (Uninstall Guide)

Post the MalwareBytes log and tell me how it is.
The log is automatically saved and can be viewed by clicking the Logs tab.

Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,920 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:28 PM

Posted 12 December 2012 - 01:00 PM

If you still need help with this issue, could you please explain what you mean with this?

Instead of safe mode, it opens a screen of system32 descriptions.


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 hyperbaladia

hyperbaladia
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:28 PM

Posted 12 December 2012 - 03:20 PM

I am no longer near them and their infected computer. They ended up buying a new one. Thank you for the replies, I just recieved them on my phone.
If I can still save the infected computer that would be awesome.
I tried the "remove pc defender plus" tutorial several times. It would not allow me to open anything, including the downloaded programs from that tutorial. After that, it would take me to a screen of what I'm assuming were files/locations in system 32 rather than safe mode.

#6 hyperbaladia

hyperbaladia
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:28 PM

Posted 12 December 2012 - 03:25 PM

Further explanation: after it wouldn't allow me to open a program (the internet, downloaded programs from the tutorial, start menu..etc)(pc defender plus would pop up with a message saying that whatever I clicked on has a plethera of trojans)(one of which it referred to as porn tool trojan, which was really funny) I would restart it and go into safe mode with networking. After clicking on that it would go to a black screen filled with some sort of system 32 descriptions/files.

#7 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,920 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:28 PM

Posted 12 December 2012 - 03:56 PM

When you boot in Safe mode, you see a list of loaded drivers roll over the screen. AFter that safe mode should load. MOst likely it doesn't do that in your case.

Can you try to rename the tools mentioned in the guide to winlogon.exe.
On a clean computer, right click the following (RKill) download link and select "save link/target as". Save the file as Winlogon.exe to a flashdrive.

See if you can run the renamed rkill file (now named winlogon.exe). Rogues like this one often only allow files with a windows system file name to execute.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users