What kind of malware is this:S

kalinbk · Mar 27, 2009

I have Windows Vista

About late last night I installed CyberLink PowerDirect & Nero with cracks.

Then slowly when I was using CyberLink PowerDirect a pop-up would say something about program is shutting down and it does its little box shutting down progress thing. I would try using it again, and it would do the same thing.

Then I realized 2 of my icons on my desktop weren't the same like they used to be. You know how when you uninstalled something but the icons are still there they look "off". I tried clicking on them and they said the software was gone and I should delete the shortcut.

Later, I wanted to open Notepad on my Startup shortcut and I realized that some of my icons have turned like blank the same way. Like you can see the text, but the icons weren't the same. "c:\blah blah blah\.exe is not a valid application." It seems a lot of stuff in my program files have disappeared as well.

I ignored that thinking I would look it up later today. Now that I go back a lot of my programs have gone bonkers too.

"The drive or network connection that the shortcut 'Notepad.Ink' refers to is unavailable. Make sure that the disk is properly inserted or the network resource is available, and then try again."

I was going to use Paint Shop Pro to show you screencaps of what was happening, but now that is unusable too.

---

I have been looking around the forums trying to download things to fix them. Most of you guys say to save things in my C:/ but it keeps saying I need administration access and even after I say ok to do it, nothing happens. The same with C:/Program Files. I even tried going on safemode to do something with msconfig and it said it couldn't find it.

As time goes by a lot of my features are disappearing.

Help please:cry I have no idea what viruses, trojans, or whatever that I have.

chaslang · Mar 30, 2009

Welcome to Major Geeks!

kalinbk said: ↑

About late last night I installed CyberLink PowerDirect & Nero with cracks.
Click to expand...

First you need to read our policies. See: Warning about Keygens, Cracks, and other Illegal Software

Now was it worth the problems you have caused for yourself?

Immediately uninstall ALL software that you have installed this way using cracks or keygens.

Now run this: Resetting Registry and File Permissions

After a reboot, now please follow the instructions in the READ & RUN ME FIRST link given futher down and attach the requested logs when you finish these instructions.

If you have problems where no tools seem to run, please try following the steps given in the below and then continue on no matter what you find. You only need to try the TDSSserv steps if having problems getting scans in the Read & Run Me First.

TDSSserv Non-Plug & Play Driver Disable

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

READ & RUN ME FIRST. Malware Removal Guide

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware, Malwarebytes and Spybot ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

Log in or Sign up

What kind of malware is this:S

kalinbk Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member