PC Spyware/malware trouble

blitz · 11-02-2009

Hello PCHF

I'v been having trouble with my PC lately and i need some help, iv tried the Prework but when i try step 1 (RootRepeal) i open it and it just closes & using a 32-bit i went to step 3 (DDS) just to try and i opened it, a Command prompt style box opened and closed (Also to mention it saved as a screensaver file for some reason?) i then went to step 4 and tried that (SecurityCheck ) another command prompt style box popped up and said all the info at the top & said press any key to continue but i cant find the any key (joke) but i pressed a key and it just exited.

i would really appreciate any help because this problem is stopping my MSN opening, FireFox, blocking any mcafee scan & blocking Malwarebytes from opening and also i cant factory reset because i have no disk for it & i'm just also wondering if there is any other way

Sir Trews · 11-02-2009

Sorry to hear you are having troubles blitz.

I will make note of this to our great Security Team.

One of them will be along shortly to assist you.

Thank you, in advance, for your patience

Pancake · 11-02-2009

See if you can run this In safe mode......

You will need to download ComboFix.exe. Download Combofix from any of the links below. You must rename it before saving it. Name it ComFx, and Save it to your desktop.

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe

* IMPORTANT !!! Save ComboFix.exe to your Desktop
It is important that it is saved and renamed following this process directly to your desktop**

Disable your AntiVirus and AntiSpyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with our tools. More help on your specific AV here: How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Double click on ComFx.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed.

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes to continue scanning for malware.
When finished, it shall produce a log for you. Please include the ComboFix.txt in your reply.

Caution.....
Never use this program to remove files.Only use it with help from an experienced user.Wrongful use can damage your computer.

blitz · 11-02-2009

Originally Posted by Sir Trews

Sorry to hear you are having troubles blitz.

I will make note of this to our great Security Team.

One of them will be along shortly to assist you.

Thank you, in advance, for your patience

Thank-you

but why cant you help me? :o

Pancake · 11-02-2009

Running it in safe mode will help me take a look at your files.Assuming it works.

blitz · 11-02-2009

Originally Posted by Pancake

Running it in safe mode will help me take a look at your files.Assuming it works.

Safe mode works, and opens the things that wont open on normal, i wouldn't know what id be looking for to be honest.

& im downloading and looking through as we speak, thank you for your help.

blitz · 11-02-2009

has found rootkits and is trying to retart - brb

11-02-2009	#1
blitz Silver Member Join Date: Dec 2008 Posts: 102 PC Experience: Some Experience	PC Spyware/malware trouble Hello PCHF I'v been having trouble with my PC lately and i need some help, iv tried the Prework but when i try step 1 (RootRepeal) i open it and it just closes & using a 32-bit i went to step 3 (DDS) just to try and i opened it, a Command prompt style box opened and closed (Also to mention it saved as a screensaver file for some reason?) i then went to step 4 and tried that (SecurityCheck ) another command prompt style box popped up and said all the info at the top & said press any key to continue but i cant find the any key (joke) but i pressed a key and it just exited. i would really appreciate any help because this problem is stopping my MSN opening, FireFox, blocking any mcafee scan & blocking Malwarebytes from opening and also i cant factory reset because i have no disk for it & i'm just also wondering if there is any other way

11-02-2009	#2
Sir Trews Moderator Join Date: Mar 2006 Location: West Coast.. you pick... Posts: 2,618 PC Experience: Back on the West side	Re: PC Spyware/malware trouble Sorry to hear you are having troubles blitz. I will make note of this to our great Security Team. One of them will be along shortly to assist you. Thank you, in advance, for your patience __________________ Saesa omentien lle (Pleasure meeting you) ◊*Prework* ◊ *PC Specs ◊* *Da Rulez◊Donation!* ≈Toshiba≈GRC≈CCleaner≈WCG≈Memtest≈Speedfan≈**

11-02-2009	#3
Pancake Senior Security Analyst Join Date: Jun 2006 Location: Victoria, Australia Posts: 8,297 PC Experience: Elite PC Guru	Re: PC Spyware/malware trouble See if you can run this In safe mode...... You will need to download ComboFix.exe. Download Combofix from any of the links below. You must rename it before saving it. Name it ComFx, and Save it to your desktop. http://download.bleepingcomputer.com/sUBs/ComboFix.exe http://www.forospyware.com/sUBs/ComboFix.exe * IMPORTANT !!! Save ComboFix.exe to your Desktop It is important that it is saved and renamed following this process directly to your desktop Disable your AntiVirus and AntiSpyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with our tools. More help on your specific AV here: How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs Double click on ComFx.exe & follow the prompts. As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console. Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message: Click on Yes to continue scanning for malware. When finished, it shall produce a log for you. Please include the ComboFix.txt in your reply. Caution..... Never use this program to remove files.Only use it with help from an experienced user.Wrongful use can damage your computer. __________________ An Australian Member of My real name is Eddy

11-02-2009	#4
blitz Silver Member Join Date: Dec 2008 Posts: 102 PC Experience: Some Experience	Re: PC Spyware/malware trouble Originally Posted by Sir Trews Sorry to hear you are having troubles blitz. I will make note of this to our great Security Team. One of them will be along shortly to assist you. Thank you, in advance, for your patience Thank-you but why cant you help me? :o

11-02-2009	#5
Pancake Senior Security Analyst Join Date: Jun 2006 Location: Victoria, Australia Posts: 8,297 PC Experience: Elite PC Guru	Re: PC Spyware/malware trouble Running it in safe mode will help me take a look at your files.Assuming it works. __________________ An Australian Member of My real name is Eddy

11-02-2009	#7
blitz Silver Member Join Date: Dec 2008 Posts: 102 PC Experience: Some Experience	Re: PC Spyware/malware trouble has found rootkits and is trying to retart - brb

Similar discussions...
Thread	Thread Starter	Forum	Replies	Last Post
Solved: Malware/Spyware problems!	macropod	[Fixed] Hijackthis! Logs	14	07-30-2009 04:45 AM
Pending: Spyware? Malware?	eoin89	[Pending] HJT Logs	3	04-03-2009 05:18 AM
Pending: i have spyware/malware	tunny0	[Pending] HJT Logs	6	04-02-2009 10:32 PM
Solved: What Spyware-malware to get? HELP!	Ganton	Spyware / AdWare	1	12-24-2008 10:53 PM
Pending: Spyware Malware Porblems	EmattE	Spyware / AdWare	4	07-11-2006 03:05 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode