Over 1 million tech questions and answers.

Can't update antivirus, can't access any antivirus website, can't enter safe mode.

Q: Can't update antivirus, can't access any antivirus website, can't enter safe mode.

Hi.

I can't update my antivirus : BitDefender Free Edition v10.

I also can't enter windows xp in safe mode. An error msg will come out (like computer crash, in blue screen).

I also can't enter or scan online from any antivirus website.

Could this be virus?

RELEVANCY SCORE 200
Preferred Solution: Can't update antivirus, can't access any antivirus website, can't enter safe mode.

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Can't update antivirus, can't access any antivirus website, can't enter safe mode.

Hello it most likely is..I am moving this topic to the Am I Infected forum. Can you do these?You will need to Download and Run DDS which will create a Pseudo HJT Report as part of its log..If for some reason you cannot perform a step, move on to the next.Please follow this guide. go and do steps 6 thru 8 ,, Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help . Then go here Virus, Trojan, Spyware, and Malware Removal Logs ,click New Topic,give it a relevant Title and post that complete log.Let me know if it went OK.

Read other 3 answers
RELEVANCY SCORE 110.8

Hi there!

Maybe since I downloaded a file, "holdemindicator161_3019.exe (Trojan.FakeAlert)", as is reported by "Malwarebytes' Anti-Malware 1.33", I am no longer able to update my Anti-virus, AVG 8 Free.

I tried going to the Malwarebytes's site but the access was blocked, and while trying to solve my problem, I realized I couldn't access some anti-virus sites either.

I cannot install SpyBot, since it requires server access, and I could only access Malware's software by reinstalling it (it delivered me the error "vbaccelerator sgrid ii control runtime error '0' ").

Since some of the system files are infected, I don't think I should delete them, but I don't know how to heal them either.

I would appreciate your help.

Telmo
 

Read other answers
RELEVANCY SCORE 107.6

Please help,

I'm running windows xp SP2 and have acquired "antivirus 2008". I tried following the steps in one of the forums disabling the needed things in AVG, and spybot, installing sdfix, and when I attempted to enter safe mode using the F8 method, I was unable to use the up/down arrows or the ones on the number key pads to select safe mode. I'm at a loss at this point and a newbie to the forum. I've attached a log from hijack this.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:25:03 AM, on 15/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\sstray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files... Read more

Read other answers
RELEVANCY SCORE 106.4

Hi there,
Have been infected with Antivirus Live.
Printed off removal guide and downloaded rkill.com and mbam-setup.exe to USB flash drive
tapped F8 during reboot and choose safe mode with networking as requested in guide
Was given message that windows has detected a problem and shut down to protect computer.

Technical information:
0x0000007E (0xC0000005, 0x80537009, 0xF89DB3E0, 0xF89DB0DC)

Ant ideas as this is all i get every time the systen tries to boot up........

A:cannot enter safe mode to remove antivirus live

Have you tried using normal mode?

Read other 3 answers
RELEVANCY SCORE 104.4

I have sadly picked up some malware and normally this would be very easy to take care of but this one's different. For some reason, I can't enter safe mode (btw this computer is running XP) as I get a "boot loop". As in I select safe mode and then the computer restarts prompting me to restart normally or select a safe mode option. I've tried to do it from a regular boot but nothing doing. Obviously, a side effect it not being able to run task manager so I can't even kill the processes to do anything. Both AVG and Malware bytes are blocked by the program so I have no idea what to do.

I apologize for the brick of text. If anything needs to be cleared up I'll happily do it.


Fun/off topic Fact: Ever computer I touch gets destroyed. My laptop needs a new mother board, this desktop has annoying malware, and my mothers laptop has glitchy drivers. I should probably pursue a different career.

A:Antivirus Soft: can't enter safe mode, rkill.com (and renames) have been patched

Hello one2many, :)

Do I understand correctly that you are able to boot into Normal Mode?

Read other 19 answers
RELEVANCY SCORE 102

Hi,

I need help in repairing my laptop, I believe it was recently infected by a Virus / Malware. Below is a summary of what I'm experiencing for reference.

Operating System: Windows XP SP3
Laptop Model: MSI-GX620 Series

*Unable to enter Safe Mode. It basically shows a blue screen but will quickly reboot afterwards (Registry Keys are already missing).
*Unable to finish HijackThis scan, it runs but it will stop once it reaches the hosts section. Checked my host file and its a whopping 4MB file. Basically it is not able to generate any log file for review.
*Cannot enable my Antivirus (Avira Free).
*Unable to run Malware Bytes.
*Multiple Running Process: ipconfig.exe

I'm on a different computer now, I can download files from here and I can just transfer the required files to my laptop if its needed.

Best,
Brian
 

Read other answers
RELEVANCY SCORE 94.8

Hi,

I am new to this forum and I truly appreciate the knowledge that the members shared in the forum.
For almost 3 days I realized I could not perform live update for my anti virus software and also when I tried to access the website of any anti virus website, i.e. symantec.com, avg.com, avira.com. the internet will prompt me saying "failed to connect".
I tried to run spyboot, it would not run, because it can't access the updated files online.
Please help me....

A:Unable to access any antivirus website or performing live update

Are you able to burn a disk or download to a thumb drive from another computer?If yes, try running mbam:------------------------Please download Malwarebytes Anti-Malware and save it to your desktop.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal proces... Read more

Read other 2 answers
RELEVANCY SCORE 90

Hi.I can't update my antivirus : BitDefender Free Edition v10.I also can't enter or scan online from any antivirus website.I also can't enter windows xp in safe mode. An error msg will come out (like computer crash, in blue screen).My firefox browser sometime redirect to ask.com site. I had re-install the toolbar(long time ago), but it still happen.Sometime, i also can't access to any pc help forum site.I can't run gmer as per preparation guide. It close itself.Attach with, dds log as per instructed;DDS (Ver_09-12-01.01) - NTFSx86 Run by User at 7:00:35.79 on Fri 03/05/2010Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_13Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.3326.2720 [GMT 8:00]AV: Bitdefender Antivirus *On-access scanning disabled* (Outdated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}FW: Avira Firewall *disabled* {55185680-1D7E-44D7-3094-596BB89B90C9}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.exeC:\Program Files\TortoiseSVN\bin\TSVNCache.exeC:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\WINDOWS\system32\rundll32.exeC:\... Read more

A:Antivirus cant update, cant access any antivirus/pc-help site/forum, cant run gmer

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Fo... Read more

Read other 4 answers
RELEVANCY SCORE 90

Hello, I am unable to update my antivirus software (Norton Internet Security) as it cannot connect to the LiveUpdate server even though I am connected to the internet and can access all sites except for those such as Symantec or Microsoft. I've even checked if I was able to websites for free antivirus such as AVG and Avast! but still I am unable to do that. On reading the forum thread posting rules, I tried downloading DDS and GMER but still wasn't able to do so since bleepingcomputer.com and gmer.net was unable to load.

I was however able to use HijackThis, and this log was created:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:42:39, on 8/8/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\MICROS~3\GAMECO~1\Common\SWTrayV4.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\vVX6000.exe
C:\Program Files\Common Files... Read more

A:Unable to update antivirus software or access any antivirus websites

Read other 7 answers
RELEVANCY SCORE 89.2

Hi. I'm a first time user here. I can usually search around on google and find solutions to any problems but this ones got me. I first noticed that I couldn't update AVG 8 when I finally got back online after about 6 months of being offline. I tried going to their website to try and update manually but was told that a connection couldn't be established and to make sure I was connected to the internet. I then tried SuperAntiSpyware but the same result. I then tried to download AVG 8.5 from another computer to install on this but the problem remained.
Since then I have been searching around the net for solutions and every solution I attempt seems to come to a 'cannot establish connection' page. I tried to run in Safe Mode and once it gets past the first loading sequence the screen flashes blue then restarts.
Asides from this the browser runs fine, most websites are opening.
Help me computer guys.




DDS (Ver_09-02-01.01) - NTFSx86
Run by Matt DLM Sims at 7:47:04.97 on Mon 03/09/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447.64 [GMT 1:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe -k i... Read more

A:Cannot update AntiVirus or access antivirus related websites

Hello and welcome to TSF

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

========

Please follow all instructions and in which order they come, if you have any questions, please ask before proceeding. Its important that you follow this through until i give you the all clear.

Please DO NOT Attach logs to your posts unless you are advised to do so.

=========

Please visit this webpage for download links, and instructions for running combofix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Read other 17 answers
RELEVANCY SCORE 87.6

Hello Techsupportforum!

I have this problem for quite long - I am unable to open (or ping) any of the antivirus web pages like kaspersky, avg, eset and maybe more (haven't tried all of them). I though it might be a malware so I downloaded Malwarebytes Anti - Malware and tried to update it but I couldn't (there was an error that it can't connect or something like that). I ran a scan anyway it found something but the problem remains. I recently had something like a virus that was pretending to be an anti virus program (it looked really suspicious and it got on my computer out of nowhere...) I somehow got rid of it with the help of some instructions I found on the internet. I don't think it's relevant with my problem but I thought I should mention it. I am currently using no antivirus on my computer and it's really starting to bother me as it might affect my security (accounts, passwords, etc.).

Here is the requested information (Gmer showed the following warning when it finished the scan: GMER has found system modification coused by ROOTKIT activity):





DDS (Ver_10-03-17.01) - NTFSx86
Run by Administrator at 0:25:59.62 on 22/03/2010
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.2047.1634 [GMT 2:00]

AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: CleanUp Antivirus *On-access scanning enabled* (Updated) {D02DEA07-4... Read more

A:Cannot access antivirus web pages nor update the antivirus

Please download MGADiag.exe to your desktop.

Double-click MGADiag.exe and click Continue in the bottom right of the window to run the tool.

When it's done, capture a screenshot of the finished scan, and post that.

In Windows a screenshot of the entire monitor, complete with taskbar, can be copied to the system clipboard by pressing the Print screen key (normally located in the top row on the right-hand side of the keyboard)..

You can then paste the clipboard into a program like MS Paint to save it as an image file or paste it directly into a document. Press the Print screen key
Click the "Start" button (normally located in the bottom left of your screen).
Click "Run" & type "mspaint" (without quotes) & click the "OK" button.
Wait while the application "Paint" opens. Once it is open, proceed to the next step.
Click the "Edit" menu and select "Paste".
Click the "File" menu and select "Save As...". A dialog box will appear.
In the "File name" field, enter a name of your choice.
Click the "Save as type" drop-down and select "JPEG (*.JPG;*.JPEG;*.JPE*;.JFIF)".
Click the "Save" button.

Attach it in your next reply, please.

To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, browse to where you saved the file, and
Click Upload... Read more

Read other 4 answers
RELEVANCY SCORE 87.6

Hi there, i would really like some help regarding my problem as stated in the title. I'm running Windows XP SP2 and am using Avira AV Free Edition. Recently i couldn't update my avira due to an "Internet Connection Failed"..

Besides that, i also found out i cannot access websites that belongs to antiviruses such as www.avira.com, www.avg.com, kaspersky, panda... even microsoft.com can't load! I'm suspecting a virus or malware preventing my pc from accessing the sites..

I ran CC Cleaner and Spybot to clear all the junk and spyware, even made a full system scan but nothing worked.. So i heard that i can get a solution here if i post my hijackthis log.. so here it is....

Logfile of HijackThis v1.99.1
Scan saved at 9:26:04 PM, on 3/15/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\PS Tray Factory\PSTrayFactory.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system3... Read more

A:Can't update Antivirus & can't access antivirus websites

Hi KeLv & Welcome to TSF

We can offer you assistance with Malware & Virus problems but we no longer use HijackThis. Please read this & follow the instructions as stated - http://www.techsupportforum.com/secu...oval-help.html - Once you have done as stated, please be patient, they are very busy.

Read other 4 answers
RELEVANCY SCORE 87.6

Hi there, i would really like some help regarding my problem as stated in the title. I'm running Windows XP SP2 and am using Avira AV Free Edition. Recently i couldn't update my avira due to an "Internet Connection Failed"..


Besides that, i also found out i cannot access websites that belongs to antiviruses such as www.avira.com, www.avg.com, kaspersky, panda... even microsoft.com can't load! I'm suspecting a virus or malware preventing my pc from accessing the sites..

I ran CC Cleaner and Spybot to clear all the junk and spyware, even made a full system scan but nothing worked..

here's the thing.. i managed to perform the dds scan but cannot run the gmer.exe as nothing happens when i click on it (no msg appears either). i bliv something (probably the virus) is hindering this. this has happened when i tried to use a process explorer as well as microsoft update files. nothing happens when i click them.. so the problems are as stated at the top and here are the dds scan results...


DDS (Ver_09-02-01.01) - NTFSx86
Run by Administrator at 22:12:45.09 on Sun 03/15/2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_12
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2046.1459 [GMT 8:00]

AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Outdated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
s... Read more

A:Can't update Antivirus & can't access antivirus websites

Let's see if we can get a GMER log

Open notepad and copy/paste the text in the quotebox below into it:


Quote:




@echo off
copy /y gmer.exe omer.exe
start omer




Save this as run.bat Choose to "Save type as - All Files" next to gmer.exe
It should look like this:
Double click on run.bat & allow it to run

Then, use these settings to produce a log.
If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Read other 6 answers
RELEVANCY SCORE 82.8

Im using windows xpSP2 im not able to update my malwarebytes or spybot or any other various removal tools. also when trying to enter safe mode after i choose safe mode the computer just reboots. ive run malwarebytes and other programs without the updates and it comes up clean. ive run hijack this and here are those results.

please help
thanks in advance
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:04:48 AM, on 5/2/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Expl... Read more

A:cant update programs or enter safe mode

Read other 14 answers
RELEVANCY SCORE 82.4

Previously my PC was infected by SWP 2009 virus, so I sent it for repair. However after formatted, i still can't access website like: antivirus, microsoft and I also can't update my msn to lastest version. Can anyone help? Thanks.

Here is my HJT log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:21:27 PM, on 8/1/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Thunder Network\Thunder\Program\Th... Read more

A:can't access antivirus website

Read other 16 answers
RELEVANCY SCORE 82.4

Hi
 
I downloaded dodgy file last week. Afterwards my antivirus (Vodafone PC Protection) wouldn't run normally or in safe mode. Neither would AVG or malwarebytes. Before malwarebytes stopped its scan I glimpsed a message saying something like boot files hidden.
 
I decided to reinstall OS using drive partition.
 
Everything seemed fine until yesterday when I found a message saying the laptop had just recovered from a blue screen crash. Then this morning everything froze on startup. 
 
I can currently boot in safe mode but I can't run the antivirus.
 
I've just run Kaspersky TDSSKiller in safemode and when I included 'Loaded Modules' among objects to scan it reboots to normal, bypassing safe mode, then freezes at 75% installation of the Kaspersky utility. I can't copy and past the report. 
 
I guess my partition drive must have been infected as well. Any help would be greatly appreciated.
 
 
Evolver
Edited by hamluis, Today, 07:46 AM.Moved from Win 7 to Am I Infected - Hamluis..
 
Moderator Edit: Moved from the AII forum to the Malware Logs forum Due to Combofix Log
Roger

A:Antivirus won't run in safe mode

Have removed PUP.Optional.Conduit via MWB and a ton of trackers via Hitman Pro but the AV still won't open. 

Read other 5 answers
RELEVANCY SCORE 82

Hi!I have a Lenovo Y510 P with windows 10. After an automatic update I got the black screen, the fans are going and the keyboard backlight start, but nothing else. This happened before like 3 times but the eventually it just started working after 1-2 days of restarting the computer. But now I've had it like this for 3 week or so. I don't get anything except the black screen and it doesn't respond to anything. Except that I can turn on and off the keyboard lights and if I have the battery in and take out or put in the ac adapter the computer makes a beeping sound. I've tried removing the battery, external devices and the ac adapter and then hold the powerbutton down, no success.I've tried pressing the F-keys to enter safe mood, but nothing happens.I've tried pressing the Lenovo recovery button, still nothing.I've also tried to install windows with a usb but nothing happens. I'm at a lost, does anyone know anythin more I can try??Appreciate all help!!

Read other answers
RELEVANCY SCORE 81.6

A friend brought me a computer because Anitvirus Security Pro would keep running on her laptop. I have had this on different computers and have been able to clean them but this one is really a beast.
 
Her system is running Win 7  the laptop is not allowing the system to boot in Safe Mode and It will also not allow access to Regedit or MSCONFIG. Any suggestions on getting control of the system back?

A:Antivirus Security Pro - won't allow Safe Mode

here is my frst file
 FRST.txt   19.44KB
  2 downloads

Read other 28 answers
RELEVANCY SCORE 81.6

Hi,
I have an infected windows XP SP2 pc.
I do not have any active antivirus software on this pc ( ESET NOD32 is expired).
1. I tried downloading a few free antivirus softwares like avira/avg/avast/MSE but was unsuccessful as -
a) either they do not support sp2 or
b) on clicking download the page does not load
2. I have tried running online antivirus softwares like bitdefender (cannot load) and ESET (after running the activeX control tried downloading the .cab file but nothing happened)

Following is the info from SysInfo -

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 2, 32 bit
Processor: Intel(R) Pentium(R) D CPU 2.66GHz, x86 Family 15 Model 4 Stepping 7
Processor Count: 2
RAM: 501 Mb
Graphics Card: Intel(R) G33/G31 Express Chipset Family, 256 Mb
Hard Drives: C: Total - 39997 MB, Free - 24258 MB; D: Total - 39997 MB, Free - 218 MB; E: Total - 39997 MB, Free - 222 MB; F: Total - 32624 MB, Free - 398 MB;
Motherboard: Gigabyte Technology Co., Ltd., G31M-S2L
Antivirus: ESET NOD32 Antivirus 4.0, Updated: No, On-Demand Scanner: Enabled
 

A:Cannot run antivirus scan even in safe mode

-----------------------------------------------------------
Be sure to read the information in these threads about Windows XP risks and options:
Derek's post here is a view of the risks : End of Support For Windows XP
You have already taken this risk with an SP2 machine, and lost the bet.
My post concentrates on software options for saving the machine: Windows XP - The Elephant In The Room
Read it very carefully.
Your machine will support the simplest of Linux systems, but really will not be satisfactory with ANY of the newer Windows.
I don't think trying to Fix this will produce a good result.
Almost all of our Fixing tools actually require XP Service Pack 3 to work, and installing Service pack 3 on an infected machine will usually fail or produce an unstable system.
This may be why the programs you are trying to use don't work.
Windows SP3 came out in 2008, and Support for SP2 ended in 2010.
 

Read other 2 answers
RELEVANCY SCORE 81.6

Help I cannot get ito safe mode to remove Antivirus Security Pro! Please can someone help me?!

A:Antivirus Security Pro - won't allow Safe Mode

I also am running win7 64bit

Read other 6 answers
RELEVANCY SCORE 81.6

Hi, i am new to this forum and i have a pretty big problem with my computer. Dell Dimension 4550, windows xp home edition, service pack 3.

I first encountered the problem when i was bombarded by a ton of popups of random things in internet explorer, but i use opera as my main browser. so that was odd. The popups then turned into an automatic installation that looked to be authentic windows security center, but was a fake, and i could do nothing about it. if i ended the process, another would start.

The popups have now stopped, i ran superantispyware and found many viruses. I fixed all, but when i log onto windows, i get error messages of missing .dll files: ntuser.dll, calc.dll, sinuvili.dll, pofutuva.dll.

Another problem is my safe mode. when i attempt to run, a blue screen appears stating that windows has shutdown to prevent damage to computer, and at the bottom of screen i see: *** STOP: 0x0000007B (0xF7A46528, 0xC0000034, 0x00000000, 0x00000000)

I saw in another forum that to fix this, i could boot from the original xp disc, select "R" to repair, and enter "CHKDSK /R". I tried this, but nothing happened.

Another observation is my computer clock, it has changed to military time.

I have now tried to run a HIJACK THIS log, but i wasn't able to. So i ran rsit.exe, and came up with the attached log file.

Can someone please look over the log file and tell me if there is anything i can do? i am lost when it comes to this.

Thank you, ... Read more

A:Cannot Run antivirus programs, or run in safe mode.

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Go to Start > Run and copy/paste the following into the Run box and click OK:

C:\rsit\info.txt

A text file should open. Please post the contents of that file in your next reply.

------------------------------------------------------

I need to see a gmer log in order to help you.

Delete your existing copy of gmer. Please run this special version of gmer:

Download GMER Rootkit Scanner from here and Save it to your Desktop. Double-click gmer.exe to run it. If asked to allow gmer.sys driver to load, please consent.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Uncheck the following ...Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it... Read more

Read other 2 answers
RELEVANCY SCORE 81.6

As I stated on my other post, my computer has been formatted for a month now. I?m using windows XP. My main antivirus (McAfee) just can?t complete a whole scan without the pc restarting by itself. It happens with all antivirus and anti malwares and some other kind of programs too. I just don?t know what to do anymore.

On the other post someone told me to try my scans on safe mode. McAfee restarted, SpyBot closed and couldn?t get open again and stinger had to close. Only hijack worked all the way through. I have disabled windows restore.
This is the log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:18:03, on 3/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Arquivos de programas\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\ARQUIV~1\McAfee\MSC\mcmscsvc.exe
c:\ARQUIV~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\Arquivos de programas\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Softw... Read more

A:All Antivirus Canīt Go Through Even In Safe Mode (hijack Log)

Hello katia and welcome to BleepingComputer!Apollogies for the delay. The forum has been very busy lately. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis Log.Thanks,Johannes

Read other 3 answers
RELEVANCY SCORE 81.6

I have a host of problem that have developed of late. I installed a file conversion program called Audio Convert and during the install some odd 'windows related" messages came up. Awhile ago you helpedme solve an issue regarding a "No Disk" error. You saw that I had no antivirus engine and I've been tring with my IS{P to get their program working but still have had no luck, you suggested AVG and I tried and failed to get it to install and load properly. After that little incident recently, I've lost my "Run" button, after clicking stat, I ahve no Shut Down/REstart buttons, instead I have a switch user button. I lost my Msconfig, and can't restart in safe mode, in any of them, the computer goes into a restart.



I've got an HP Pavillion m7480n, P4 930, 2G of RAm, Wndow XP Media Center Edition, it's 2 months old



Can you help?

 




RELEVANCY SCORE 81.6

Okay so I am having major problems! Running Windows XP First I started getting all these BAD popups and nothing made them go away. So I ran a Ccleaner, and Spybot S&D. I was prompted to reboot. I did. when I got to log in screen, it immediately prompted an automatic reboot citing a NT Authority\system reboot. So I rebooted in safe mode with networking, tried to run antivirus. then I tried to run SuperAntiSpyware, it started to run, showed 2 trojans and something else, then stoped running and I no longer have access to it. So I tried running malewarebytes (also renamed it mb.exe). Same thing. Starts to run, dissapears then I no longer have access to it. Happened to spy bot S&D. Tried to access the online SuperAntiSpyware. No go. Runs, picks up 2 Trojans and quits working. HELP!!! I can not boot in normal mode.

I can not run a Hijackthis....

A:Can not run Antivirus, can only boot in safe mode

You mentioned that you booted into safe mode with networking.
Have you tried regular safe mode?

Read other 3 answers
RELEVANCY SCORE 80.8

Hi I am unable to access any antivirus website from my computer. I ran an sdfix.exe on my computer. Here is the Report which it generated.Even after doing this I am unable to access any antivirus website. Also I have zonealarm installed on my machine with a trial version of QuickHeal antivirus software.Please let me know how I can solve this issue. SDFix: Version 1.240 Run by Shardul on Sun 02/08/2009 at 12:24 PMMicrosoft Windows XP [Version 5.1.2600]Running From: C:\SDFixChecking Services :Restoring Default Security ValuesRestoring Default Hosts FileRebootingChecking Files : Trojan Files Found:C:\DOCUME~1\Shardul\LOCALS~1\Temp\TMP2.tmp - DeletedC:\DOCUME~1\Shardul\LOCALS~1\Temp\TMP9.tmp - DeletedRemoving Temp FilesADS Check : Final Check :catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2009-02-08 12:35:30Windows 5.1.2600 Service Pack 3 NTFSscanning hidden processes ...scanning hidden services & system hive ...[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zcvzxvwyy]"DisplayName"="Network Security""Type"=dword:00000020"Start"=dword:00000002"ErrorControl"=dword:00000000"ImagePath"=str(2):"%SystemRoot%\system32\svchost.exe -k netsvcs""ObjectName"="LocalSystem""Description"="Enables event l... Read more

A:Unable to access antivirus website from my computer

The random named files are usually a bad sign, google only returns this thread and the one you started at http://www.computing.net/answers/security/...ites/24673.htmlIt's considered bad manners to ask for help in 2 forums as resources get wasted, I will try to help you since you haven't received an answer there yet.We might try one other program since you have already run SDFix, which I would normally save for the last one to use in this forum.Please download Malwarebytes Anti-Malware (v1.33) and save it to your desktop.alternate download link 1alternate download link 2If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rul... Read more

Read other 9 answers
RELEVANCY SCORE 80.8

Hey Forum!! I have a lappy here with a special version of this normally easy to remove virus and I need some assistance. Per other forum post instructions, I have scanned with FRST and here is my log:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by SYSTEM on MINWINPC on 07-10-2013 11:15:50
Running from F:\
Windows Vista ™ Home Premium (X86) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Recovery
 
The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-10-03] (Intel Corporation)
HKLM\...\Run: [hpqSRMon] - [x]
HKLM\...\Run: [HP Health Check Scheduler] - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
HKLM\...\Run: [Microsoft Default Manager] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
HKLM\...\Run: [AS2014] - C:\ProgramData\gX3ga333\gX3ga333.exe [550552 2013-10-04] ()
HKLM\...\Winlogon: [Userinit] c:\windo... Read more

A:Antivirus Security pro cant boot into any safe mode

Hello Huludrock I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same... Read more

Read other 3 answers
RELEVANCY SCORE 80.8

Greetings All!
I'm reaching out to the Pro's.

Huge mess on my bosses laptop - kids used it need I say more. It started with Internet Security 2010 which I thought I had removed and now Antivirus Live is in there. I can't get McAfee to load, rkill is now detected and blocked, won't work, can't get network connection any more. All this in just 6 hours yesterday!

I can't get on line to get HJT nothing is being allowed to run other than the fake infection warnings. This is a WinXP media center OS running IE7.

I'm open to suggestions, and need some help.
 

A:Antivirus-Live not able to boot into safe mode

Read other 16 answers
RELEVANCY SCORE 80.8

Hello,

I am unable to remove a stubborn rootkit problem from my computer. Even in safe mode, I am unable to run any antivirus program or Malwarebytes.

I checked Non Plug and Play drivers, but did not see anything suspicious except "Catchme".

Any help would be appreciated. The logs are below and attached.

Thank you,
Shootmenow

DDS (Ver_09-12-01.01) - NTFSx86 MINIMAL
Run by Administrator at 9:40:45.03 on Thu 12/31/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1976.1721 [GMT -6:00]
============== Running Processes ===============

D:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
D:\WINDOWS\system32\svchost.exe -k netsvcs
D:\WINDOWS\Explorer.EXE
D:\Documents and Settings\Administrator.NLM-DUSTINB\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - d:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Act.UI.InternetExplorer.Plugins.AttachFile.CAttachFile: {d5233fcd-d258-4903-89b8-fb1568e7413d} - mscoree.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - d:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - d:\progra... Read more

A:Cannot run Malwarebytes or any antivirus software even in Safe Mode

I tried running ComboFix a couple of times. During the Completed_Stage_2, I get the following error:PEV.cfxxe has encountered a problem and needs to close.After hitting close, ComboFix continues to run and spits out this log:ComboFix 09-12-29.06 - Administrator 12/31/2009 15:01:51.6.2 - x86Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1976.1468 [GMT -6:00]Running from: G:\ComboFix.exe.((((((((((((((((((((((((( Files Created from 2009-11-28 to 2009-12-31 ))))))))))))))))))))))))))))))).No new files created in this timespan.(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))..((((((((((((((((((((((((((((( [email protected]_17.51.21 )))))))))))))))))))))))))))))))))))))))))..((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))..*Note* empty entries & legit default entries are not shown REGEDIT4[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"FingerPrintSoftware"="d:\program files\Lenovo Fingerprint Software\fpapp.exe \s" [X]"Adobe Reader Speed Launcher"="d:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]"TPHOTKEY"="d:\program files\Lenovo\HOTKEY\TPOSDSVC.exe" [2008-09-30 68976]"LPManager"="d:\progra~1\THINKV~1\... Read more

Read other 3 answers
RELEVANCY SCORE 80.8

We have a user who got the Antivirus Security Pro virus and I'm trying to remove it. All "how-tos" say to boot into safe mode, but this version of the virus won't allow me to do so, either with command prompt, networking or without. Without safe mode, I'm not sure how I'll be able to remove it. Any ideas would be great.

A:Antivirus Security Pro Removal - No Safe Mode

I'll report this topic to appropriate helpers.
1. Please let us know what Windows version you have and if it's 32- or 64-bit.
2. Is the computer bootable in any mode?
Hold on there....

Read other 2 answers
RELEVANCY SCORE 80.8

Please let me know if there is anything I can do to get rid of antivirus live. My computer will not run any security software and it will not go into safe mode.

A:Can not get into safe mode and laptop has antivirus live

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed. I currently have as many open topics as I can effectively handle; this will have you back in queue with the proper logs so an available helper would be able to assist.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 80.8

Hello my name is Austin,
 
As many other posters this past month, my father recently got infected with the Antivirus Security Pro Malware. I built this computer 8 months ago for my father, so I'm almost responsible for anything wrong with it. I'm a novice at most programming lingo, but I am really good at following processes, as it's what I do for a living. I WILL be donating to the person helping, my father needs his computer to do work this weekend. So before we start this process, I want to say "Thank You" in advance.
 
Any way, I tried doing the bleepingcomputer.com solution for the malware, but I have not been able to enter safe mode (shuts down soon after log in).
 
I read a post today on the first step of run the frst.exe file in the infected computer. Please let me know if you prefer for me to paste the report results within my post or attach the file. Here are the text results:
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by SYSTEM on MININT-IPBE6V6 on 18-10-2013 17:10:41
Running from H:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery
 
The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [MSC] - "C:\Program Files\Microsoft Security Client\msse... Read more

A:Antivirus Security Pro Malware - No Safe Mode

Justsalsa,
 
 
to BC Forums!!
 
Thanks for the FRST report. I am presuming it was run from a USB pen drive.
 
Let's see if the following works for you to remove the Antivirus Security Pro Malware ...

  Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below
Save it to the USB pen drive, and name it: fixlist.txt
 
start
HKLM\...\Run: [MSC] - "C:\Program Files\Microsoft Security Client\mssecex.exe" -hide -runkey
HKLM-x32\...\Run: [] - [x]
S2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{c2c37fed-cd7d-2662-80ff-1651ebb34c7f}\   \...\???\{c2c37fed-cd7d-2662-80ff-1651ebb34c7f}\GoogleUpdate.exe"
C:\Users\RichardRice\AppData\Local\Google\Desktop\Install
C:\Program Files (x86)\Google\Desktop\Install
C:\ProgramData\pvqdkqkjvbllroblbxh.reg
end

Once again, run FRST64 as you did before.
When the tool opens click Yes to disclaimer.
Now, press the Fix button, just once, and wait.
 
When done, FRST produces Fixlog.txt on the USB pen drive.
 
>> Please provide the Fixlog.txt on your reply.
 
 
  If (which I doubt) the computer is still under the 'spell' of the Antivirus Security Pro Malware, look for its shortcut on your Desktop .
Next, go to Control Panel > Folder Options
Click the View tab
Select/check: Show hidden files, folders and drives
Click: Apply > OK
 
Right click on the Antivirus Security Pro icon on... Read more

Read other 3 answers
RELEVANCY SCORE 80.8

I read the Antivirus Security Pro Removal Guide for this site but I cannot get into safe mode.  The F8 key doesnot work and I cannot run msconfig either so i am kind of stuck.  HELP

A:Antivirus Security Pro removal but cannot get into safe mode

Hello ac lets see if we can get a DDS log as per this guide...Please follow this Preparation Guide, do steps 6,7 and 8 and post in a new topic.Let me know if all went well.

Read other 7 answers
RELEVANCY SCORE 80.8

Hi all,

Last night my Acer Aspire One became infected with the Xp Antivirus 2012 virus. I have dealt with this once before and suspect it may be from a shared disk I used. Anyways, last time I was able to track the problem down using some tutorials, rkill, malwarebytes and a few other malware removal tools. This time though the damage was done too quickly. By the time I knew it, no programs would launch. I couldn't access the task manager either. My laptop froze and when I tried to reboot I'd get the laptop splash screen and then nothing. I attempted to boot in safe mode and no dice.

My next step was to use Hiren's Bootcd and use Mini Xp to boot up. I was able to do so successfully but once there I was not able to get much done to fix the boot up problem. I tried identifying the problematic system file in the system32/ drivers folder but found none than looked suspicious. There was no oddly named sys file with the size 0kb.

I am at a crossroads. Should I just back my files up (since I can access them with mini Xp) and restore windows to factory settings or do I have a chance to fix this thing?
Thanks!

Chris

A:Can't boot up using Safe Mode - XP Antivirus 2012

You could try to repair your Boot File? This can be done by selecting r when coming into the Disk or onboard Recovery. When asked type in fixboot That should get it booting again, but please, before you do any thing further Post in the "Am I Infected" Forum http://www.bleepingcomputer.com/forums/forum103.html and include a link to this? Once there you will get expert help on Malware.Ray.

Read other 43 answers
RELEVANCY SCORE 80.8

Computer infected with Antivirus Security Pro; cannot successfully log on with Safe Mode as computer reboots at log on.

A:Antivirus Security Pro will not allow me to boot up in Safe Mode

KellyV6726,
 
to BC Forums!
 
When you start the computer and tap the F8 key until you get to the Advanced Boot Options menu, are you able to use
the arrow keys to select the Repair your computer menu item?
 
From there...
Select your language settings, and click: Next
Select your User account and click: OK (If you did not set a password, leave blank.)
 
On the System Recovery Options menu do you get the following options:Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Scan your computer's memory for errors
Command Prompt
 
Are you able to select the Command Prompt?

Read other 7 answers
RELEVANCY SCORE 80.8

I am newly registered to this great site. I am also a very infected Dad trying to remove Personal Antivirus from our family computer. I could not download/then launch Malwarebytes tool in normal mode. I am now following another thread trying to progress in save mode...

Any help advice is appreciated running malware quick scan...

Safe mode allowed download and quick scan now completed
Malwarebytes' Anti-Malware 1.38
Database version: 2283
Windows 5.1.2600 Service Pack 2

6/25/2009 8:07:06 PM
mbam-log-2009-06-25 (20-07-06).txt

Scan type: Quick Scan
Objects scanned: 112670
Time elapsed: 13 minute(s), 40 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 157
Registry Values Infected: 12
Registry Data Items Infected: 0
Folders Infected: 31
Files Infected: 193

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{98635087-3f5d-418f-990c-b1efe0797a3b} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{38a7c9da-8db7-4d0f-a7b1-c4b1a305bddb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8d292ec0-6792-4a38-82ed-73a087e41ba6} (Adware.MyWebSearch) -> Quarantined and deleted successfu... Read more

A:Safe Mode Stage Personal Antivirus XP

For what its worth after copying th deleted files into this thread and closing down the priogram in safe mode and restarting in normal mode I was able to access the malware program and have found an additional 21 infected files full scan continues.....more to follow..

Read other 3 answers
RELEVANCY SCORE 80.8

I may be infected with a virus. I am scanning using Norton right now and OneCare won't turn on its firewall, telling me that I am 'At Risk'.

If nessesary, could I install antivirus software like Norton on my computer using Safe Mode? Note that it is likely I have been infected.

If you need anymore information, please feel free to ask.

-Elk

EDIT: Also know that recently my computer had been randomly freezing in the past three weeks. I remember I stumbled onto a website where it suddenly told me that 'MY COMPUTER WAS INFECTED'. From experience I knew it was spyware, and instead of saying YES or NO on the warning popup, I clicked the X. Norton immeditely told me I was infected and tried 5 times to remove it. Then the warnings from Norton stopped, thinking that it finally got the trojan.

Read other answers
RELEVANCY SCORE 80.8

i have some error while installing antivirus BIT DEFENDER in normal mode so i am trying to use safe mode but i am scared that what will be on that case
will any features be missed out when we install in safe mode rather than normal mode?
ANY DEMERITS PLZ MENTION

Read other answers
RELEVANCY SCORE 80.8

My husband's friend brought his computer over. He thought he had a simple hijack situation. Whenever he opened IE, Firefox, Nortons, etc it woudl immediately close. My husband has tried numerous things. He cannot even get these programs to run in safe mode. Even in safe mode, these programs immediately close. We dont even know what we're trying to kill. Any suggestions???

A:Cannot run antivirus, antimalware, or internet even in safe mode

Sorry, he is on a Dell laptop, running XP.

Read other 1 answers
RELEVANCY SCORE 80.8

Hi, my mothers Compaq Presario Windows 7 became infected with Antivirus Security Pro.  I have tried to boot into safe mode with and without networking to no avail, it will look like it is working in but will bring up the windows screen and then indicate that it is logging off. I am unable to bring up tskmgr, mbam or rkill in regular mode.  Per a previous post I ran fst64 to get the information and am copying it below: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013Ran by SYSTEM on MININT-5T4B15L on 18-10-2013 14:58:14Running from H:\Windows 7 Home Premium (X64) OS Language: English(US)Internet Explorer Version 10Boot Mode: RecoveryThe current controlset is ControlSet001ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.==================== Registry (Whitelisted) ==================HKLM\...\Run: [PC-Doctor for Windows localizer] - C:\Program Files\PC-Doctor for Windows\localizer.exe [95728 2009-09-16] (PC-Doctor, Inc.)HKLM\...\Run: [AS2014] - C:\ProgramData\6DXrl3Xn\6DXrl3Xn.exe [659096 2013-10-18] ()HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,,C:\ProgramData\6DXrl3Xn\6DXrl3Xn.exe -sm,HKLM\...\Policies\Explorer: [NoControlPanel] 0HKLM-x32\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)HKLM-x32\...\Run: [HP Remote Solution] - C:\Program Files (x86)\Hewlett-Packard\HP Remote Solut... Read more

A:Antivirus Security Pro - Won't let me boot into Safe Mode

One more thing, in looking at the above log, is shows several restore points, however, when I tried to to access them, I was told that system restore was turned off.

Read other 8 answers
RELEVANCY SCORE 80.8

My dad's flash drive was infected with Antivirus Security Pro, yesterday I plugged it into my laptop and it got infected
I tried to remove it as I did on his computer but I just doesn't let me boot into Safe Mode, as it automatically reboots the system
I've googled about this and read some topics on this forum about this
as I read some things about the virus getting smarter, I've already did those FRST things and here is the log, as I know there's one specific way to do to each user
I'm posting on this section cause I realized I could've posted on wrong section before

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-09-2013 01
Ran by SYSTEM on MININT-2JK5KHB on 28-09-2013 21:05:33
Running from G:\
Windows 7 Home Premium Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Recovery

The current controlset is ControlSet001
[b]ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.[/b]

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [L... Read more

A:Antivirus Security Pro won't let me boot into Safe Mode

Hello pedrofortunato I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the... Read more

Read other 25 answers
RELEVANCY SCORE 80.8

Hi all, First time here at BleepingComputer.com. I just took a look through some of the forums and it looks like there's a fellow named "Gringo" who is adept at this one and may be able to help me out. I've got a computer that has the Antivirus Security Pro virus on it and it's beating me up pretty badly. I can't boot into safe mode, nor can I load any programs to clean it up. What can I do to get this off my system? Thanks for the help. DK.Edit: Moved topic from Anti-Virus and Anti-Malware Software to the more appropriate forum. ~ Animal

A:Antivirus security pro won't let me boot into safe mode

I'll report this topic to appropriate helpers.
1. Please let us know what Windows version you have and if it's 32- or 64-bit.
2. Is the computer bootable in any mode?
Hold on there....

Read other 4 answers
RELEVANCY SCORE 80.4

I think I have a virus that I haven't been able to get rid of. I have ran Norton antivirus but it came up with nothing, but now I can't update Norton or connect to certain web site, such as www.symantec.com, I keep getting "this page cannot be displayed". I have checked my hostsfile in system32 folder and it looks fine. I also am getting pop-ups occasionally, for which I have ran spybot, it helped but did not solve the problem. I am running winXP Pro, and here is a copy of my Hijackthis log:

Logfile of HijackThis v1.97.7
Scan saved at 9:35:57 PM, on 6/16/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\Explorer.EXE
C:\windows\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\windows\System32\CTHELPER.EXE
C:\Program Files\Thrustmaster\Thrustmapper\TMTMTSR.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Messenger Plus! 2\MsgPlus.exe
C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Verizon Online\Visual IP InSight\IPMon32.exe
C:\Program Files\Verizon Online\Visual IP InSight\IPClient.exe
C:\Program Files\Common Files\Symantec Sh... Read more

A:Cannot connect to symantec website, or update Antivirus.

Read other 13 answers
RELEVANCY SCORE 80

I've tried to run some malware programs.... I can't install avg or eset and I can't boot to safe mode either.. Hijack This install gives an error not a valid 32 etc...
when i try to install the antivirus it says i have problems with privileges of being an administrator.. i am the administrator.. HELP!!

A:Help. Cant Install Antivirus Software Or Boot To Safe Mode

Hello malpert and welcome to BC

In order to assist you, we need a bit more information.

What is your operating system: Windows XP, Vista, etc.?

I see that you have problems installing security programs. Do you have security programs already installed? If so, please name them, and let us know if these programs are working.

Orange Blossom

Read other 1 answers
RELEVANCY SCORE 80

My computer was hit with the Security Tool virus. It's possible I even allowed it through spybot -- the little spybot messages come up while I'm typing, sometimes, and if I hit the "a" key for allow, then who knows what just happened?

Anyway, I can only run ANY program from safe mode -- including task manager and any antivirus program -- and running any antivirus software will cause the computer to turn itself off. I can't download winzip from safe mode, so forgive me that the logs attached aren't zipped.

Thanks in advance for the help.

Also, I'm having difficulty with the gmer program. It only allows me to check five boxes: Services, Registry, Files, C:, and ADS. All other boxes are greyed out. Also, it only allows me to save as a .log file, which I'm not allowed to upload...

I opened the gmer log and re-saved it as .txt... hopefully nothing's lost in translation?

Ah. Completely missed this: "Once done click on the [Save..] button, and in the File name area, type in "ark.txt" or it will save as a .log file which cannot be uploaded to your post"

Well, that explains that.

Also, here's the DDS. My apologies for losing track of some of the very simple instructions.

DDS (Ver_10-12-12.02) - NTFS_AMD64 NETWORK
Run by Qris at 15:50:19.86 on Mon 02/21/2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2812.1617 [GMT -8:00]

AV: AVG Anti-Virus Fre... Read more

A:Antivirus software forces shutdown in safe mode

Hello, Welcome to TSF.
I'm nasdaq and will be helping you.

Open your task manager and stop this process in bold.

uRunOnce: [gDbLmCf05200] C:\ProgramData\gDbLmCf05200\gDbLmCf05200.exe

To get to the Task Manager press the CTRL+ALT+DEL keys simultaneously.

When done delete this folder in bold.

C:\ProgramData\gDbLmCf05200\

Restart the the computer normally if you can.

Submit a fresh DDS log for my review.

Let me know what problem persists.

Read other 3 answers
RELEVANCY SCORE 80

I am having an issue with my computer since I updated my iTunes and QuickTime and now anytime I try to open or run a program, it pulls up "view downloads" page and asks if I want to run or save the file. Neither option works as it simply re-opens another "view downloads" page and won't allow anything to run. I am operating in Safe Mode but same issue arises. See attached picture as anything I try to open goes to this page and keeps adding the same item over and over if you try to click run or save.
Can you steer me in the right direction?

A:Virus won't allow any downloads or internet in safe mode. Won't run antivirus

Hello,
Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.
Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.
If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

Read other 3 answers
RELEVANCY SCORE 80

Hi,

I am facing a major virus problem with my system. Task manager, registry edit and folder options of my operating system got disabled and also I am unable to boot in safe mode. If I press F8 and chose Safe Mode (with networking or any other option), pc is getting restarted again so again I had to start my pc normally.

I downloaded avira and avast and when I tried to install them, installations were being closed at the starting without any prompt messages. While googling, I came to see this forum I had downloaded hijackthis and here is my log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:56:00 PM, on 2/22/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\bin\msmdsrv.exe
C:\Program Files\Microsoft SQL Server\MSSQL.3\Reporting Services\ReportServer\bin ... Read more

A:Unable to install antivirus & cannot boot in safe mode

Hello, sundeep38.My name is aommaster and I will be helping you with your log.I apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having would appreciate you letting us know If not please perform the following below so I can have a look at the current condition of your machine.Thanks and again sorry for the delay.Please note that I am in the process of my training so it may take a while for me to get back to you, as each of my fixes need to be checked by a coach first.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)In your next reply, please include the following:RSIT Log

Read other 22 answers