Computer Hijacked

ap95 · May 30, 2016

I have a Dell Inspiron with Windows 7. I've been using torrents for a few years now with some annoying, minor viruses here and there, but never anything critically damaging. However, yesterday, I downloaded a torrent that ended up telling me I needed to update my codecs to watch the movie. It ended up downloading something onto my computer, and then my computer just shut off.
When I turned it back on, I type in my password like normal, but then it goes to a black screen with a giant box that tells me to enter my Windows product key. Above that is a toll free number to "call for help" and then to the left there are a few buttons I can click such as "task manager" and "explorer." I've been using the explorer button to maneuver around my computer to try and uninstall the stuff that installed itself yesterday. I removed most of them but a couple wouldn't so I downloaded a couple malware stuff on here to get rid of them. Everything was quarantined/deleted that was detected BESIDES "MPC Cleaner". I used "IOBit Malware Fighter" to uninstall it but it won't work. It keeps saying "failed."

Kestrel13! · May 30, 2016

Hi and welcome.

http://img827.imageshack.us/img827/1263/frst.gif For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.
For 64-bit (x64) systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

Restart the computer.

As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.

Use the arrow keys to select the Repair your computer menu item.

Choose your language settings, and then click Next.

Select the operating system you want to repair, and then click Next.

Select your user account and click Next.

To enter System Recovery Options by using Windows installation disc:

Insert the installation disc.

Restart your computer.

If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.

Click Repair your computer.

Choose your language settings, and then click Next.

Select the operating system you want to repair, and then click Next.

Select your user account an click Next.

On the System Recovery Options menu you will get the following options:

Startup Repair

System Restore

Windows Complete PC Restore

Windows Memory Diagnostic Tool

Command Prompt

Click to expand...

Select Command Prompt

In the command window type in notepad and press Enter.

The notepad opens. Under File menu select Open.

Select "Computer" and find your flash drive letter and close the notepad.

In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

Note: Replace letter e with the drive letter of your flash drive.

The tool will start to run.

When the tool opens click Yes to disclaimer.

Press Scan button.

It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

ap95 · May 30, 2016

Kestrel13! said: ↑

Hi and welcome.

http://img827.imageshack.us/img827/1263/frst.gif For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.
For 64-bit (x64) systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

Restart the computer.

As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.

Use the arrow keys to select the Repair your computer menu item.

Choose your language settings, and then click Next.

Select the operating system you want to repair, and then click Next.

Select your user account and click Next.

To enter System Recovery Options by using Windows installation disc:

Insert the installation disc.

Restart your computer.

If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.

Click Repair your computer.

Choose your language settings, and then click Next.

Select the operating system you want to repair, and then click Next.

Select your user account an click Next.

On the System Recovery Options menu you will get the following options:

Select Command Prompt

In the command window type in notepad and press Enter.

The notepad opens. Under File menu select Open.

Select "Computer" and find your flash drive letter and close the notepad.

In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

Note: Replace letter e with the drive letter of your flash drive.

The tool will start to run.

When the tool opens click Yes to disclaimer.

Press Scan button.

It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

Click to expand...

Hi I'm at the command window and I typed "e:\frst.exe" and pressed enter but it says "The subsystem needed to support the image type is not present."

I made sure to replace the letter "e" with my flash drive letter, which is also "E"

I double checked and the FRS tool is on the flash drive. What did I do wrong?

Kestrel13! · May 30, 2016

Work your way thru what you can of the below procedures.

READ & RUN ME FIRST - Malware Removal Guide

Log in or Sign up

Computer Hijacked

ap95 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

ap95 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member