Fake shockwave/java update virus help

Discussion in 'Malware Help (A Specialist Will Reply)' started by Jhoffz88, May 21, 2013.

  1. Jhoffz88

    Jhoffz88 Private E-2

    I was using a site I use to watch movies and got an update pop up that I knew was fake, unfortunately I don't remember if it was java or adobe, when I X'd it out it downloaded anyway. Now after my comp has restarted it says all my web browsers were either removed or missing, same with my spy bot SD, hijack this... It also says I don't have permission to access my desktop or when trying to install a program it gives me "error 5:access denied". I know it has 2start up programs that run on system start up called "active update" and spybotSD told me it changed 2 registries done by a program called "0ki7znduokheb.exe" which I'm sure is just a random letter generation, any help would be appreciated but if its inevitable ill wipe my comp... Thanks for any replies
     
    Jhoffz88, May 21, 2013
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Before we can decide on a course of action, you have to at least tell us what version of Windows. ;)

    Also are you able to run anything at all ( safe mode should be tried to if normal mode does not work )? Can you get Task Manager to open? If yes, do you see any of those strange process names and can you kill them?
     
    chaslang, May 22, 2013
    #2
  3. Jhoffz88

    Jhoffz88 Private E-2

    Sorry I posted between cals at work, I have windows 7 eternity, yes I can open my task manager any process I kill auto restarts, and I can boot safemode using the system config app in windows 7
     
    Jhoffz88, May 22, 2013
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then let's do the below.

    Please do the below so that we can boot to System Recovery Options to run a scan.

    For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.
    For 64-bit (x64) systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    On the System Recovery Options menu you will get the following options:
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please attach this file to your next reply. (See: How to attach)
     
    chaslang, May 23, 2013
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds