Re: Does anyone know what this is?

RebeLeeous · Jan 12, 2013

I posted this yesterday-
A few weeks ago an icon appeared on my desktop titled 婀ฌ橡矶೸ˏ햜Ů핬Ů睐�㵻햜Ů After about a week a second one with chinese also appeared. I'm broke, and not tech savvy, so I just left it alone hoping I could scrape up enough to take it to someone before it kills my computer. But today my icons seemed to all be disappearing, then I started having trouble with internet explorer. Then an error popped up saying "cannot install powrprof.dll", I tried to do a system backup so I could at least gain enough control to figure this out, but another error popped up saying it couldn't open it. I ended up having to crash my computer. When I restarted it, my icons were back, but there were 5 more icons with the chinese titles, in addition to the original two. Has anyone seen or heard of this happening before?

I went to log in today and it couldn't find my information. I re-registered when the same sn, password, email..it's like I never registered at all yesterday. I tried to reply to my original post and it's taking me to an error page.

I wanted to post updated information for anyone who might end up with the same virus. I translated the file names, they are made up by a mix of languages, mostly Chinese and Korean. When I translate the whole name, the words repeated most often are rubber, Angeles, Reception, and gaze. When I translate each individual character, the words repeated most are oak, breakwater, and gaze.

Yesterday it prevented avast from doing a scan. I also was unable to download the programs on this sites 'read me first' thread. Today I had to crash my computer again. After I restarted, it let my do a system restore, but the earliest date it would allow me to go to was the date the first icon appeared on my desktop. After I did the restore, when I restarted, it couldn't find my profile to log on to, it went to the general windows profile. I also lost all my photo and word document files, and all 7 of the icons were gone as well. I un-did the system restore and recovered all my files and am now trying again to download the programs from the 'read me first' thread. If it won't download, I have no idea what to do..I can't find anything about this on the internet. I have no idea what it is or how I got it, cos I stick to a handful of sites I've never had trouble with and the onl attachements I ever open are ones I've just been told by a friend they are sending and tell me exactly what the attachements are (i.e. work stuff from an anthology I am working on..not stuff like "oh what a cute picture I found in my email, you gotta see this.") I don't even open emails if I don't recognize the sender..

Kestrel13! · Jan 12, 2013

Welcome to the Malware Removal Forum.

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****

Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

Log in or Sign up

Re: Does anyone know what this is?

RebeLeeous Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member