Infected with several Malware...

Discussion in 'Malware Help (A Specialist Will Reply)' started by jennybella, Sep 15, 2008.

  1. jennybella

    jennybella Private E-2

    I've tried several things already so I don't know what to do next under my circumstances which is why I wanted to post here. This is what happened and what I've done thus far.

    I ran an infected file and like a moron, permitted it through Windows Defender. I was infected with Vundo and several fraudware. I deleted several files I could find in my hard drive and some of the Registry Key files Windows Defender couldn't successfully remove, I removed with Registry Edit.

    I've done a Disk Cleanup. I've attempted to do System Restore but what happened was I'd select the restore date, click next, and it would just sit there. This was yesterday. Then today when I attempted, several restore dates were removed and only the most recent (when I was infected) was available to select. Again I click next and it just sits there.

    As a result of the infection, there is a fraudware Windows XP Security warning immediately when my computer loads that stays on my desktop. I can access sites through Internet Explorer, EXCEPT for THIS site, or any site that deals with virus removal. It's like the virus knows what I'm trying to do. For example if I go to superantispyware.com or the site that has VundoFix (I forgot what it's called), I am redirected to a bogus site. If I go to Google and click on any search result, I am also taken to a bogus site. The only way I can access these sites is through my Guest account, which I am on now. If I try to download VundoFix or any of the others here, I can't save it in Program Files because I am on the Guest account and it says I don't have permisson. If I go in under Administrator, I can't access any sites period (I get IE error message) so I don't know how I can download any tools...

    I've tried to do this in Safe Mode and other modes available in F8. Makes no difference.
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Welcome to Major Geeks!

    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.


    If something does not run, write down the info to explain to us later but keep on going.

    Do not assume that because one step does not work that they all will not.


    READ & RUN ME FIRST. Malware Removal Guide


    Note:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

    Starting your computer in Safe mode

    2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
     
  3. jennybella

    jennybella Private E-2

    Okay, I completed the steps up to the msconfig. When I select Normal Startup and click apply, I get this message: "An access denied error was received while attempting to change a service. You may need to logon using an Administrator account to make the specified changes." Mind you, I WAS logged on as Administrator in Safe Mode...
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Just continue with the instructions....as stated, if something doesn't work....carry on with the rest. :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds