Over 1 million tech questions and answers.

A virus is not allowing me to access anti Anti-Virus webpages, and more...

Q: A virus is not allowing me to access anti Anti-Virus webpages, and more...

Hi,

I just downloaded a "keygen" from bittorrent, and when I opened the exe file, nothing happened, then the exe file disappeared/deleted itself. I am pretty convinced that this was a virus, because my computer has slowed down significantly.

Now this part is unbelievable - I went online to download an antivirus program or the online Trend Micro scan, AND MY BROWSER (Firefox and IE) WON'T LET ME ACCESS ANY ANTI-VIRUS WEBPAGES!!! I managed to download Hijackthis and Spybot by downloading them through download.com, but it wouldn't let me go directly to the official sites! How strange is that?

Attached are links to the original file that I downloaded, if someone can scan it for me and deduce how to fix the problem, and also my Hijackthis log. (I hosted them on senduit.com for one week so you can access them.)

Thanks so, so much.

Hijackthis log is at - http://senduit.com/3b7234

Original d/l file is at - http://senduit.com/8624cc

RELEVANCY SCORE 200
Preferred Solution: A virus is not allowing me to access anti Anti-Virus webpages, and more...

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: A virus is not allowing me to access anti Anti-Virus webpages, and more...

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 3:43:31 PM, on 5/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\Alt+Q Hotkey.exe
C:\Program Files\UberIcon\UberIcon Manager.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\RK Launcher\RKLauncher.exe
C:\Program Files\Mac Volume Bar\3r-1c.exe
C:\Program Files\Windows-Related\stickies\stickies.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\JGsoft\EditPadPro6\EditPadPro.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\ClamWin\bin\ClamTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Dan Ackerman\Desktop\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O1 - Hosts: 184.196.64.44 f-secure.com
O1 - Hosts: 102.35.134.158 fastclick.net
O1 - Hosts: 175.33.199.87 grisoft.com
O1 - Hosts: 105.9.199.125 kaspersky-labs.com
O1 - Hosts: 175.26.38.236 kaspersky.com
O1 - Hosts: 113.214.19.103 kaspersky.ru
O1 - Hosts: 181.92.116.12 mcafee.com
O1 - Hosts: 110.211.91.110 my-etrust.com
O1 - Hosts: 185.156.136.247 nai.com
O1 - Hosts: 113.44.133.254 networkassociates.com
O1 - Hosts: 178.106.76.170 sophos.com
O1 - Hosts: 108.49.35.169 symantec.com
O1 - Hosts: 178.73.132.50 trendmicro.com
O1 - Hosts: 104.152.134.206 viruslist.com
O1 - Hosts: 174.25.193.182 viruslist.ru
O1 - Hosts: 100.58.33.218 www3.ca.com
O1 - Hosts: 102.158.3.18 akamai.net
O1 - Hosts: 186.30.217.102 update.symantec.com
O1 - Hosts: 105.26.14.176 service1.symantec.com
O1 - Hosts: 179.147.199.183 www.antivir.de
O1 - Hosts: 105.108.119.104 antivir.de
O1 - Hosts: 181.87.27.164 drweb.com
O1 - Hosts: 110.60.112.152 www.drweb.com
O1 - Hosts: 173.72.89.247 drweb.ru
O1 - Hosts: 111.44.59.160 www.ravantivirus.com
O1 - Hosts: 177.51.6.174 ravantivirus.com
O1 - Hosts: 105.20.84.201 bitdefender.com
O1 - Hosts: 184.57.115.18 www.bitdefender.com
O1 - Hosts: 111.9.106.84 www.clamav.net
O1 - Hosts: 179.134.219.18 clamav.net
O1 - Hosts: 113.105.150.225 pandasoftware.com
O1 - Hosts: 184.14.192.135 www.pandasoftware.com
O1 - Hosts: 104.26.34.150 ftpav.ca.com
O1 - Hosts: 178.40.61.175 upgrade.bitdefender.com
O1 - Hosts: 104.145.107.4 www.bitdefender.ru
O1 - Hosts: 186.223.18.161 bitdefender.ru
O1 - Hosts: 100.125.216.116 open.by
O1 - Hosts: 175.210.118.4 vba32.de
O1 - Hosts: 106.43.202.48 www.open.by
O1 - Hosts: 114.221.90.151 lavasoft.de
O1 - Hosts: 187.158.9.42 lavasoft.com
O1 - Hosts: 176.168.161.132 rs01.avast.com
O1 - Hosts: 113.196.23.53 sm01.avast.com
O1 - Hosts: 173.85.201.82 rs02.avast.com
O1 - Hosts: 100.83.75.234 sm02.avast.com
O1 - Hosts: 178.94.124.98 rs03.avast.com
O1 - Hosts: 115.115.189.31 sm03.avast.com
O1 - Hosts: 179.82.30.213 rs04.avast.com
O1 - Hosts: 108.6.5.208 sm04.avast.com
O1 - Hosts: 184.166.75.163 rs05.avast.com
O1 - Hosts: 109.98.190.168 sm05.avast.com
O1 - Hosts: 185.166.221.212 rs06.avast.com
O1 - Hosts: 101.71.169.118 sm06.avast.com
O1 - Hosts: 183.68.192.179 rs07.avast.com
O1 - Hosts: 113.156.186.65 sm07.avast.com
O1 - Hosts: 173.216.20.157 rs08.avast.com
O1 - Hosts: 115.25.97.195 sm08.avast.com
O1 - Hosts: 185.172.91.117 rs09.avast.com
O1 - Hosts: 103.56.26.4 sm09.avast.com
O1 - Hosts: 187.21.191.24 rs10.avast.com
O1 - Hosts: 106.135.126.37 sm10.avast.com
O1 - Hosts: 186.92.191.182 rs11.avast.com
O1 - Hosts: 101.151.218.40 sm11.avast.com
O1 - Hosts: 182.12.173.157 rs12.avast.com
O1 - Hosts: 102.44.86.6 sm12.avast.com
O1 - Hosts: 187.177.109.41 rs13.avast.com
O1 - Hosts: 100.135.39.7 sm13.avast.com
O1 - Hosts: 183.4.26.28 rs14.avast.com
O1 - Hosts: 109.152.56.132 sm14.avast.com
O1 - Hosts: 174.22.52.47 rs15.avast.com
O1 - Hosts: 112.44.76.101 sm15.avast.com
O1 - Hosts: 176.24.2.108 rs16.avast.com
O1 - Hosts: 104.88.100.68 sm16.avast.com
O1 - Hosts: 175.209.96.55 rs17.avast.com
O1 - Hosts: 108.136.54.58 sm17.avast.com
O1 - Hosts: 182.81.75.62 rs18.avast.com
O1 - Hosts: 100.132.172.31 sm18.avast.com
O1 - Hosts: 183.224.68.115 rs19.avast.com
O1 - Hosts: 103.144.191.113 sm19.avast.com
O1 - Hosts: 184.193.195.14 rs20.avast.com
O1 - Hosts: 103.69.72.110 sm20.avast.com
O1 - Hosts: 176.169.145.194 rs21.avast.com
O1 - Hosts: 105.200.223.248 sm21.avast.com
O1 - Hosts: 176.72.49.72 rs22.avast.com
O1 - Hosts: 105.200.136.24 sm22.avast.com
O1 - Hosts: 184.106.33.253 rs23.avast.com
O1 - Hosts: 112.106.95.4 sm23.avast.com
O1 - Hosts: 176.15.175.146 rs24.avast.com
O1 - Hosts: 115.172.124.52 sm24.avast.com
O1 - Hosts: 174.173.108.253 rs25.avast.com
O1 - Hosts: 111.199.132.183 sm25.avast.com
O1 - Hosts: 181.141.199.236 rs26.avast.com
O1 - Hosts: 108.110.4.67 sm26.avast.com
O1 - Hosts: 187.38.57.188 rs27.avast.com
O1 - Hosts: 110.153.170.218 sm27.avast.com
O1 - Hosts: 184.120.97.180 rs28.avast.com
O1 - Hosts: 104.221.204.97 sm28.avast.com
O1 - Hosts: 184.87.84.126 rs29.avast.com
O1 - Hosts: 113.158.156.12 sm29.avast.com
O1 - Hosts: 175.137.116.58 rs30.avast.com
O1 - Hosts: 106.89.171.42 sm30.avast.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: RefresherBand Class - {B24BA06E-FB7B-4757-95C2-DC01125F750E} - C:\PROGRA~1\YREFRE~1\YREFRE~1.DLL
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [System Files Updater] C:\WINDOWS\FlyakiteOSX\Tools\System Files Updater.exe /S
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Microsoft Update Machine] oxljtet.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ClamWin] "C:\Program Files\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\RunServices: [Microsoft Update Machine] oxljtet.exe
O4 - HKCU\..\Run: [Alt+Q Hotkey Tool] C:\WINDOWS\Alt+Q Hotkey.exe
O4 - HKCU\..\Run: [UberIcon] "C:\Program Files\UberIcon\UberIcon Manager.exe"
O4 - HKCU\..\Run: [Yz Shadow] C:\Program Files\YzShadow\YzShadow.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [Microsoft Update Machine] oxljtet.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Startup: RK Launcher.lnk = ?
O4 - Startup: Shortcut to 3r-1c.lnk = C:\Program Files\Mac Volume Bar\3r-1c.exe
O4 - Startup: Stickies.lnk = C:\Program Files\Windows-Related\stickies\stickies.exe
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 12536 bytes

Read other 2 answers
RELEVANCY SCORE 124

I have a nasty if not multiple nasty virus's and have not been successful removing them. It started with the XP Anti-Virus 2011 Removal fake anti-virus popping up with all real anti-virus programs disabled and anytime I try to go to an antivirus website I'm redirected to a random site. This happens in all browsers not just Internet Explorer. I also had many of my files changed to hidden file folders and also the start/all programs button does not show any of my programs. I mananged to get both Malwarebytes and Superantispyware on my computer and was able to get rid of much of the problems by running these programs. Now it seems the XP Anti-Virus 2011 has been removed but I still have the issue with my webpages being redirected depending on which page I try to access. I also have many processes that should not be running in the task manager and when i close them out they just start back up again. This worm seems to be accessing my iexplorer because there are multiple iexplorer.exe open at all times and sometimes the CPU Usage gets very high which is not normal for my computer. The final symptom is that at random times I get a webpage pop up or if not a webpage an error that reads like the following example:

An error has occured in the script on this page.

line: 13
Char: 1
Error: Object doesnt support this property or method
Code: 0
URL: http:/www2a.glam.com/mobile/detect.act?affiliatedld=288743725

Do you want to continue scripts on this page?

I will get at ... Read more

A:XP Anti-Virus 2011 Fake Anti-VIrus and webpages being Redirected Virus

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
Do not d... Read more

Read other 17 answers
RELEVANCY SCORE 116.8

Hello everyone.

I have tried my best to remove this virus on my laptop, but no success yet.

Here are all of the things the virus does:

-Prevents access to websites like spybot, instead of letting me see the site, it simply says "Internet Explorer cannot display the webpage", and there is a button to click that says "Diagnose Connection Problem" (no connection problem of course)

-When I click links from a google search, they most of the time take me to the wrong webpage and I am forced to copy/paste the original link into the web bar.

-Programs like Combofix, Spybot, and HJT do not work and a box comes up after starting them saying "Combofix has stopped working".

-I tried running the programs in Safe Mode, but no luck there.

If anyone knows a fix please reply.

Thanks,

Sean

A:Virus prevents access to Anti-Virus sites/anti-virus programs (combofix, etc.)

I renamed my Combofix to something else and I followed the instructions from a different post and here is the log I ended up with:

ComboFix 09-07-29.04 - Sean 07/31/2009 0:30.1.2 - NTFSx86
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.2059 [GMT -7:00]
Running from: c:\users\Sean\Desktop\Music.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\progra~2\MICROS~1\Windows\STARTM~1\Programs\videosoft
c:\progra~2\MICROS~1\Windows\STARTM~1\Programs\videosoft\Uninstall.lnk
c:\program files\videosoft
c:\program files\videosoft\Uninstall.exe
C:\resycled
c:\resycled\boot.com
c:\windows\10057vir9sza2.cpl
c:\windows\1059zpamb5t5bd.exe
c:\windows\1069thi5fz912.bin
c:\windows\1075859zj467.exe
c:\windows\11297vzr5s51c.cpl
c:\windows\1132z5ru977d.cpl
c:\windows\11388troz4559.cpl
c:\windows\1179zs5y695.dll
c:\windows\11991szambo95d9.cpl
c:\windows\120355zoj6819.bin
c:\windows\12324tr9j7b5z.bin
c:\windows\1279zroj295.ocx
c:\windows\12a7d5wnloader999z.bin
c:\windows\132985pz2a0.cpl
c:\windows\133505i9us7z8.exe
c:\windows\13552hackt9ol37z.ocx
c:\windows\1355zw59m5d8.exe
c:\windows\13562vizus1059.cpl
c:\windows\135759orm5c5z.ocx
c:\windows\13599virus6cz5.dll
c:\windows\13614spamzo5990.cpl
c:\windows\13956trojz59.cpl
c:\windows\1502zspy169.ocx
c:\windows\15107zpa9bot54.cpl
c:\windo... Read more

Read other 1 answers
RELEVANCY SCORE 114.8

Antivirus vanished! Can't install ANY new one!Can't access microsoft and any anti virus sites (thus i cannot download or scan my computer from there)I tried to install a copy of avast pro but the set- up immediately close after opening, i also noticed a lot of programs behaving like this just like the bandmaster game from e games and Grand Theft Auto Vice City( once i opened it, it immediately closes)Tried to install that in safe mode, but the computer does not start and reboots back into normal mode.This is the content of DDS logDDS (Ver_10-11-26.01) - NTFSx86 Run by neopc10 at 19:47:12.65 on Fri 11/26/2010Internet Explorer: 6.0.2900.2180Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.353 [GMT -8:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Acronis\Schedule2\schedul2.exeC:\WINDOWS\System32\svchost.exe -k AkamaiC:\WINDOWS\system32\svchost.exe -k imgsvcC:\WINDOWS\Explorer.EXEC:\Program Files\KGB\Mpk.exeC:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exeC:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exeC:\WINDOWS\PixArt\PAC7302\Monitor.exeC:\Program Files\... Read more

A:anti virus banished.can't install any anti virus programs, can't acces microsoft and anti virus sites!!!...

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

Read other 2 answers
RELEVANCY SCORE 109.6

Hi all,
 
I'm using an older computer while mine is in the shop for the next week or so, and this thing has a massive virus. Windows defender & update are blocked, computer won't allow me to install malwarebytes chameleon or any anti-virus (even running as Administrator), even tried running exefix_cu to fix the registry and allow me to download .exe files.
 
Definitely in need of some assistance as I don't feel safe logging in to my accounts or doing the necessary business tasks on this computer - I do appreciate your help!
 
 

A:Windows 7 Worm or Virus not allowing anti-virus install

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please try to run a FRST scan. This will help us diagnose your problem.Please download Farbar R... Read more

Read other 2 answers
RELEVANCY SCORE 106.4

Hello All,I am not able to update my Zone Alarm Internet security suite for some weeks now. I was directed here from the Zone Alarm Forum. Although I can browse through most of the websites, I am not allowed to access Zone Alarm update, Microsoft update. I also tried http://www.malwarebytes.org/mbam.php and also http://downloads.superantispyware.com/down...AntiSpyware.exe but was denied access both on IE and FirexFox.Further Filemon and RootkitRevealer do not work any on my machinePlease help.Thanks

A:Unable to access Anti-virus updates / Anti-spyware website

Thanks guys,
All problems solved Thanks to SuperAntiSpyware.

Read other 2 answers
RELEVANCY SCORE 106

That's pretty much my problem. I don't know any details that could help. I tried installing Spybot to scan for the problem but I couldn't install it because my computer couldn't connect to the website and I can't move on with the installation. I'm about to scan with Avast but I doubt it will help. I know I didn't say much substance but hope it helps. Here's the HJT log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:54:49, on 26/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.e... Read more

Read other answers
RELEVANCY SCORE 105.6

This virus does not allow me to run any anti virus. Even in safe mode which I am in now with networking. It also redirects all google links. It's one of those fake anti viruses.. how am I suppose to get rid of it if I cannot do anything? Any help would be much appreciated!
 

Read other answers
RELEVANCY SCORE 104.4

Hello and thank you so much for your time.

I am running Windows XP (tell me how to find other info if you need more)
I believe with SP2, not sure on that part though

My current problems are I am being redirected a lot, although not all the time. My Antivirus programs are not updating, I currently have Malwarebytes, SUPERantispyware, AVG, Avast!.
Firefox is constantly crashing. Sometimes you will have it crash 4 to 5 times before google will even pull up.
I am also getting a Windows32 error, I'm sorry I didn't copy what it said down before sending an error report.
My system is bogging down very easily. I'm used to running multiple windows at a time but lately if you have more than one up you can just forget it.
I downloaded google chrome to see if I it would work better than firefox or IE, it shows that it downloaded just fine but nothing pulls up. At all, it won't even let you do anything.

I think that is it.

My HJT log
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761... Read more

A:Redirects, Not allowing anti-virus updates, more

Read other 16 answers
RELEVANCY SCORE 104

My computer has been infected by a virus. It started with my computer telling me I was infected (pop ups) and directing me to their website. The virus prevents me from opening my Mcafee software. I also cannot do a system restore. I have tried but only get so far and it doesnt complete. I have tried this in safe mode with no luck. I have downoladed Malwarebytes to a usb mem stick and changed the .exe file to a fake name and ran the scan. It did find somethings but it didnt fix the problems. So I can still boot up but I cant access any antivirus websites and often the system hangs as I try different things and I reboot and try again without any luck. So I found this website and I thought I would give it a try. Am I a candidate for combofix /

A:cant run anti virus, cant access anti virus websites

Download this file and save it to your desktop:http://download.bleepingcomputer.com/grinler/rkill.scrCopy it over to the problem computer on a CD or pen drive if you need to.Double-click the file to run it. A command window will open briefly. Then run a quick scan with Malwarebytes. Post the Malwarebytes log.

Read other 3 answers
RELEVANCY SCORE 102.8

hi there

i installed a program called system security (a hoax anti-virus program) and it made my computer act "funky".
a friend of mine deleted the program for me, but now my browser can't enter anti-virus programs, so my computer is almost defenseless.

i tried with several browsers: IE7, Firefox, Opera and Chrome and none of them works.
i even uninstalled opera to see if that could help, but it didn't.

the webpages i can't enter are:
WWW.bitdefender.com
free.avg.com
WWW.symantec.com
WWW.pandasecurity.com
i managed to get hold of bit defender and i installed it. but it won't scan my computer don't know why, just tells me scan couldn't be launched, and it wont update because it can't get hold on the bit defender server

please help me

ps. my computer runs on Windows XP

A:can't enter anti-virus webpages

Hello and welcome. I am moving this to the Am I Infected forum as I do not feel you have removed it..Next run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives se... Read more

Read other 1 answers
RELEVANCY SCORE 100.8

Camera Wizard not poping up after removing Total Security/Antivirus Pro_2010 I have a PC with Windows XP SP3 with Avast, SuperAnti-Spyware and MBAM while browsing I got a yellow virus warning (something win32 I believe) from Avast pop up near the bottom tray and within seconds the Total Security pop-ups started. My PC slowed to a stop so I rebooted and saw that Antivirus Pro_2010 had installed itself on my PC. All my Anti Virus programs would not start (ie MBAM) so I ended up following forums to end some processes, delete some .dll files that were known to be malicious and rename the .exe's to get Anti Virus programs to run. I installed and used AVG which found a couple things. Then I used ComboFix, and finally I got MBAM to run which found a good 40+ trojans etc. I believe I got the virus off but I tried to restore to before I got the virus but was unable to. I have since run scans with MBAM and SuperAnti-Spyware which have found nothing. Avast also finds nothing but it has a list of 44 files (mostly in WINDOWS\ folder with the last path part of file doubled) that it is unable to scan: because "The system cannot find the specified path". When I look on my C: drive and follow the file path, the second to last part is always missing (ie. WINDOWS\addins\addins) addins is not there. When I plug in my camera, the camera wizard does not pop up anymore as it use to before I had and removed the virus. I also saw on the unscanable list that there was a WINDOWS\Connecti... Read more

A:Help to remove Total Security and Anti-Virus Pro_2010 rogue anti-virus programs

Can someone please help me?
 

Read other 1 answers
RELEVANCY SCORE 99.6

Referral link: http://www.bleepingcomputer.com/forums/t/324772/my-pc-is-infected-with-trojan-virus/Hi,I have been instructed by moderator Boopme from this forum, to post a new thread concerning problems with installing Kaspersky Anti-Virus program.A couple of weeks ago, I discovered that my computer was considerably slow in loading webpages using my Firefox browser. In addition, both Kaspersky anti-virus and MalwareBytes had been disabled. I figured that my computer has been infected and discontinued using the internet.From talking to my fellow user, I suspected that he might have brought in the bug from Myspace . Fortunately, on running SUPER scan, it picked up some malware infection named Trojan.Dropper/Malevo-NV. I had it quarantined and removed immediately, but this wouldn't fix either the anti-virus software or malwarebytes. I tried to fix this by accessing Windows Xp in safe mode and that failed too.I posted a topic in Am I infected? What do I do? thread concerning the issue and got MalwareBytes to work again. I got it updated and, on scanning,picked up a whole lot of infections including Trojan.IRCBrute. Got all of them deleted and removed successfully. I also got to run Windows Xp in safe mode. I had removed Anti-Virus software using Kaspersky removal tool and tried to reinstall both in safe and normal mode unsuccessfully. In safe mode, it gave me this error-"The system administrator has set policies to prevent this installation". On the other hand,in normal modeit pr... Read more

A:Kasspersky Anti-Virus disabled/Slow loading webpages

Hello, and to the Malware Removal forum! My online alias is Blade Zephon, or Blade for short, and I will be assisting you with your malware issues!If you have since resolved the original problem you were having, we would appreciate you letting us know.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Before we begin cleaning your machine, I'd like to lay out some guidelines for us to follow while we are working together.I will be assisting you with your malware issues. This may or may not resolve other problems you are having with your computer. If you are still having problems after your machine has been determined clean, I will be glad to direct you to the proper forum for assistance.Even if things appear better, that does not mean we are finished. Please continue to follow my instructions until I give you the all clean. Absence of symptoms does not mean that all the malware has been removed. If a piece of the infection is left, it can regenerate and reinfect your machine. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding ... Read more

Read other 25 answers
RELEVANCY SCORE 99.2

Hi Im new here this is my first post also my first problem

Well everything was going great no virus getting detected

I use ESET nod32, malwarebytes and SpyBot

Now my problem is that all of my protection applications wont Update

Also I can't access any protection site like Microsoft.com, Eset.com, the website of malwarebytes and Spybot
and last is that sometime (happens sometimes) computer auto shutsdown
with a timer of 60 seconds before shutdown (please save all works...)

all other applications and websites works great except for those I mentioned

HOPE u could help me if possible ASAP because I'm using my CPU for business purposes and advance thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:32:38 PM, on 2/4/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\windows\system32\nvsvc32.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\windows\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\... Read more

Read other answers
RELEVANCY SCORE 99.2

Hi Im new here this is my first post also my first problem

Well everything was going great no virus getting detected

I use ESET nod32, malwarebytes and SpyBot

Now my problem is that all of my protection applications wont Update

Also I can't access any protection site like Microsoft.com, Eset.com, the website of malwarebytes and Spybot
and last is that sometime (happens sometimes) computer auto shutsdown
with a timer of 60 seconds before shutdown (please save all works...)

all other applications and websites works great except for those I mentioned

HOPE u could help me if possible ASAP because I'm using my CPU for business purposes and advance thanks

sorry forgot my HJT Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:32:38 PM, on 2/4/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\windows\system32\nvsvc32.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\windows\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\I... Read more

A:Anti-Virus Anti-Malware and Anti-spyware not updating

Hi, welcome to TSF!

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Read other 4 answers
RELEVANCY SCORE 99.2

Have bad infection...need best free Anti-virus, Anti-spyware, and Anti-malware software please....

THANX

Running Windows XP
 

Read other answers
RELEVANCY SCORE 98

i just bought new pc and installed XP SP2.when i try to install avast anti-virus,its window closes automatically.Then i try to install kaspersky anti-virus,but again the same problem. Then i figured out that i cant even acces my registry,task manager and hidden files.So i installed remove restrictions tool. It solved the registry,task manager and hidden files problem.But i still cant install any anti-virus.i performed the registry check by using Uniblue registry booster.It shows many errors.I removed them all.But still cant install anti-virus. I cant even boot into the safe mode,it restarts whenever i try to boot it into safe mode.I cant install the windows again bcoz i dont have any CD/DVD ROM drive or floppy drive.......Please help me with this.......heres my HIJACKTHIS log...............................

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:59:50 PM, on 3/23/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\sys... Read more

A:cant install any anti-virus....anti-virus window closes automatically

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

Read other 1 answers
RELEVANCY SCORE 98

I only noticed this when I tried to update my Windows Live Messenger, and the Microsoft website wouldn't open on Safari or IE. I tried downloading new anti-virus software like Norton, but none of their sites would open either. I Googled a bit, and lo and behold, I'm not the only one to have this kind of problem. I saw a post on this website (although the thread had closed) that was strikingly similar, so I thought I'd ask for help too. So pleeeeeease, please help me! X3
I understand I need to post a HijackThis log, so here it is:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:22:59, on 07/11/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\IFXTCS.exe
C:\WINDOWS\system32\DllHost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDO... Read more

A:Anti-virus software won't scan, well-known anti-virus sites won't open.

It looks like the virus has got wise to THIS website too, because it no longer opens unless I use a proxy server. PLEASE help me, someone... I need to be able to use my internet banking without worrying that this stupid virus has got me keylogged or something! Please, please PLEASE help me.

~ Seras
 

Read other 2 answers
RELEVANCY SCORE 98

I did a bonehead move of installing PC tools anti-virus before uninstalling vipre on my wife who's out of town. The kids infected it playing flash games. long story short, Her Gateway (win7 home premium) is on a a start-up loop. All I can get to work with a recovery disk is get into the DOS prompt by the shift+F10 at the recovery screen. Is there any way I can fix this with regedit or in a DOS prompt?

If it helps, here's the startup Repair Log:

Problem signature:
Praoblem Event Name: StartupRepairOffline
Problem signature01: 6.1.7600.16385
Problem signature02: 6.1.7600.16385
Problem signature03: unkown
Problem signature04: 21200785
Problem signature05: AutoFailover
Problem signature06: 5
Problem signature07: 0x19
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033

A:BSOD 00x50 vipre anti-virus conflicting with new anti-virus

So to summarize, You messed up the wife's PC and your trying to fix it before she gets back, but if you don't the kids are getting it?

Just messing

Can you boot into safe mode? press f8 while the PC is booting up, select safe mode and see if you can uninstall that software.

Read other 9 answers
RELEVANCY SCORE 98

My anti-virus said it removed a trojan. When I restarted my computer my anti-virus was turned off and it won't turn back on. I ran MalwareBytes and I didn't find anything, so I need some help.

A:Anti-virus removed virus now anti-virus won't turn back on.

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 11 answers
RELEVANCY SCORE 96

First of all i would like to apologize if this topic is in wrong category, or it should not even be asked on this site. And second of all, please be patience i'm a noob looking for answers So whats all about? Well i'm meeting new terms here and i have no idea what they mean and what they do. And as anyone else i wanna be safe in this era of cyber-crime. So basically i know whats a anti-virus and a anti-spyware and that they can run together. Also i heard that 2 anti-virus don't do good but 2 anti-spyware do. So what i'm asking is, what is a anti-malware? Can a anti-malware, anti-virus, and anti-spyware run together? Could you suggest some good+free of those 3? Sorry for my bad English and being such a noob

A:Anti-malware, Anti-virus, Anti-spyware

Florin, you might take interest in this thread, though it may be quite a bit of reading: What's the Best Anti-virus?

It is there that they discuss all kinds of different antiviruses and coupled security software. I personally only use Microsoft Security Essentials, but I have used it along with Malwarebytes for added security in the past.

Basically, you could have your system completely locked down with lots of extra security, but in some cases it becomes a hassle because of how much your computer becomes protected and overly secured. If you prefer a speedy computer over security, generally you use less security software, but if it is the other way around, you will want beefier security software which may slow things down slightly. That link I've provided will have most everything you will need.

Read other 9 answers
RELEVANCY SCORE 96

Hi
 
I've been having troubles with my PC for a while now. But now it is worse than ever!
 
Let me give you a back story - 
 
For the past few months I have had the problem where svchost.exe takes up a huge amount of memory and brings your computer to a crawl. With the help of this forum I finally fixed it. However, a month or so later it was back - It wasn't anywhere near as bad this time, but it still slowed me down.
So what I did was do a factory re-install of my whole computer. Everything was now fresh. However, the svchost problem remained.
 
I looked on google for some solutions and stumbled across one that looked promising. I tried to download the file the person suggested and save to my desktop, but I got an access denied message. So I went to google again. to find out why I was getting access denied. I read that I should go in to my C: drive folder, right click - properties - security - advanced ( something along those lines) and disable administrator access, then enable it again. Yes looking back this was very stupid, but I wasn't thinking. So I did this, and now I have access to nothing. I can't download anything, I can't transfer files from a USB to my computer even in safe mode, I can't do a system restore.
 
On top of this AVG and the built in windows defender have both somehow been disabled, and I can't turn them back on (I have been told this is probably because I have a virus on my system, but I don't know if this is true or not)... Read more

A:PC is a MESS - Virus disabled anti-virus, Access Denied, svchost etc.ws

Ok so PART 1 IS SOLVED
 
I fixed the 'access denied' issue by booting up safe mode with networking, from there going into the security options of my C Drive, and managed to enable access that way. 
 
Still got problems with svchost and antivirus being disabled though. I have just downloaded malwarebytes and am currently scanning with it.

Read other 15 answers
RELEVANCY SCORE 96

Hi,

My desktop PC running on Windows XP Professional with SP3 is infected with some kind of virus/spyware that prevents access to anti virus sites.

The virus has also corrupted McAfee virus scan binary and prevents access to sites which clean spyware/malware. I have Malwarebytes' Anti-Malware and SuperAnti Spyware installed. But they cannot update their definitions since the virus attack started about 1 week ago.

I have tried several attempts to clean the virus/malware using the above anti spyware (McAfee scan is corrupted and won't start). The anti spyware finds a few worms and trojans and says that it cleaned them, but they keep coming back. I ran the scan in Safe mode with/without internet connection but that didn't help.

I have Zone Alarm installed but think that it is also infected.

Following are the main symptoms I see

1. No visible error messages/pop ups during bootup.

2. After booting I see quite a few new programs, mainly from the "C:/windows/system32/temp" dir trying to access the internet. Zone Alarm blocks them.

3. After doing a Google search in IE, if I click any website link, it is redirected to another random site. Sometimes opening the link in another IE window helps. (right click -> "open in new window")
Cannot access Microsoft or any anti virus/spyware related website.

4. Many times a pop up message saying "my computer may be infected with spyware" shows up and asks for running a scan. Initial... Read more

A:Virus/Spyware preventing access to Anti-Virus/Microsoft files

Hi there,

* Go here to run an online scanner from ESET.Tick the box next to YES, I accept the Terms of Use.
Click Start
Make sure that the option Remove found threats is UNchecked.
Click Scan
Wait for the scan to finish
Copy and paste report as a reply to this topic.

Read other 10 answers
RELEVANCY SCORE 95.6

Hi,

I'm using windows 7 and cannot format right now because I have school. The problem is I cannot access anti-virus websites and I keep getting random popups. I tried cleaning it out with spybot,malwarebytes, Avast anti-virus, and removing stuff in hijack this with no luck it keeps coming back. Any suggestions?

A:Malware/Virus issue cannot access Anti-Virus sites and havae random popups

Here is more info: When I goto google and type bleeping computers the links come up. I press the link it redirects me to advertising site. Here is my malwarebytes first log file

Malwarebytes' Anti-Malware 1.38
Database version: 2381
Windows 6.1.7127

7/6/2009 11:45:58 AM
mbam-log-2009-07-06 (11-45-57).txt

Scan type: Full Scan (C:\|)
Objects scanned: 201253
Time elapsed: 25 minute(s), 24 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 16
Registry Values Infected: 18
Registry Data Items Infected: 9
Folders Infected: 2
Files Infected: 316

Memory Processes Infected:
C:\Windows\Fonts\services.exe (Worm.Archive) -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\drv (Rootkit.Agent) -> Quarantined and deleted successfully.
HKE... Read more

Read other 2 answers
RELEVANCY SCORE 95.6

guys help me pls, last night my uncle reformat my PC then he insert his USB
but the USB have a SALITY VIRUS, (we dnt know the virus in the 1st place)
he told me that he cant reformat again because the VIRUS can go back after reformat. we cant use any anti virus like something blocking them. he have a PC on his own. and same as problem as me because of his USB. then he SCAN his HARD DISK in other computer so can detect the VIRUS then he found SALITY VIRUS. he told me to scan my HARD DISK in other computer too but i dnt have any other PC so he told me that i can remove the SALITY VIRUS by searching in the inter SALITY REMOVAL TOOL. ive scan many SALITY REMOVAL
they detect it. 1st i cant RUN my anti VIRUS ( NOD ) and SPYBOT after i scan the sality removal tool. i found 3 sality virus and detele it. after that i can install the SPYBOT and i can open the NOD but i cant update NOD. so that i cant scan ANTI VIRUS because its not updated. although the spybot is normal now. so i tried to uninstall the NOD and install other ANTI VIRUS but seems it cant open either. when i tried to install the other ANTI VIRUS nothings happened like something block it. and i tried to visit the other website of any ANTI VIRUS but they always said that (problem loading page) (server not found) somethin like they dnt want me to acces any anti virus. i cant USE SAFE MODE. when im using safe mode it goes BLUE SCREEN then said that problem has been occured. some VIRUS etc.... i can open NOD but cant update... Read more

A:can't update anti virus and acces anti virus website

can someone help me pls

Read other 2 answers
RELEVANCY SCORE 95.6

I downloaded a virus after getting a link in a Facebook message, right after that i downloaded avast on another computer, installed it here and deleted some Trojan which it detected. After deleting it i could get on antivirus websites and than i went to sleep, when i got up this morning i got scared that i still have the virus after sending virus links in facebook messages to people in my friend list so i deleted Avast, apps on facebook and cookies in browser and got Matwarebytes Anti-Malware 1.75.1.0.1300 trial and SUPERAntispyware 5.6.1018 which found 4 trojans that it deleted every time but after rebooting it found them again. I disabled system restore, revealed invisible files and deleted viruses in safe mode. 1virus is quarantined by SUPERAntispyware 5.6.1018 and im scared if i delete it, it might get back on the computer somehow?. But now i can't see any antivirus websites and it shows message like this for example (on all browsers-dragoncomodo,IE,chrome): "The webpage at http://free.avg.com/ might be temporarily down or it may have moved permanently to a new web address.
Error 137 (net::ERR_NAME_RESOLUTION_FAILED): Unknown error."

A:i thought i deleted a virus but i still can't access anti-virus websites

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

Read other 1 answers
RELEVANCY SCORE 95.6

I have a Windows XP Home laptop and I am unable to access any anti-virus websites for updates. Also tried installing Ad-aware but it failed. Malwarebytes found 2 objects but could not delete them on restart. Here are the results from DDS and the GMER results attached. What are the next steps?

Thanks in advance!


DDS (Ver_09-11-24.02) - NTFSx86
Run by Zeny at 14:35:07.86 on Wed 11/25/2009
Internet Explorer: 6.0.2800.1106
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.447.203 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\carpserv.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\America Online 9.0a\aoltray.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AOL Companion\companion.exe
C:\Documents and Setting... Read more

A:Virus/Malware preventing access to Anti-Virus Sites

Haven't received any responses yet . . . bumping.

Thank you.

Read other 16 answers
RELEVANCY SCORE 95.6

Thanks in advance folks-

Details as I remember (Windows XP, no updates for apx. 6 months, Netscape 7.2 browser, dial-up)

1. Started late November/early December as whenever I inserted a USB travel drive I would get message from aVast! that there was a virus detected and put in the chest. I would reformat the travel drive and still would get the message.

2. Problem degraded to not being able to update aVast! anymore (couldn't access, browser couldn't find)

3. Problem degraded to not being able to update SpyBot.

4. Installed Norton AntiVirus 2009 from purchased CD, removed aVast!, ran NAV, it found some adware items but continues to show a message on browser startup "An intrusion attempt by ******** (my computer ID) was blocked. Application path \DEVICE\HARDDISKVOLUME2\WINDOWS\SYSTEM32\SVCHOST.EXE" There are similar versions of this message that include the numbers xxx.xxx.xxx.xxx that look like server numbers (as you can tell I'm no expert here).

5. Tried to update Norton but I can't get on the Symantec site (browser says doesn't exist or address is wrong). The Norton virus database is from August 2008 so probably doesn't have the info I need for whatever ails me i.e. cannot run LiveUpdate. Also cannot get onto any MS site to get XP Service Package 3 (thinking there is a patch in there somewhere that deals with this).

6. Ran the old Spybot to clean up what I can. Downloaded AML Registry ... Read more

A:Cannot access anti-virus websites, updates, MS, virus detected

Hello, hold on to that HJT log as we may still be using it. i want you to try getting an Mbam scan log for us. Some types of malware will disable MBAM and other security tools. If MBAM will not install, try renaming it. Right-click on the mbam-setup.exe file and change the .exe extension to .bat, .com, .pif, or .scr and then double-click on it to run.If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files, right-click on mbam.exe and change the .exe as noted above. Then double-click on it to run. ***Another work around is by not using the mouse to install it, Just use the arrow keys, tab, and enter keys.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to... Read more

Read other 15 answers
RELEVANCY SCORE 94.8

Hello, I'm not sure when this all started, but recently I've been having troubles in a very generalized area which has led me to believe I have contracted some kind of virus/rootkit.

When I ran a scan with ESET Antivirus 4, I tried to update the virus definitions and found I couldn't. I then tried to access www.eset.com. Firefox gives me a notification that the connection was terminated. I tried getting malwarebytes anti-malware from the official website, but that has the connection terminated as well. windowsupdate.microsoft.com redirects to google.com, but otherwise I haven't noticed much abnormal behavior. I've ran scans with ESET, Malwarebytes, A-squared, Sophos, and the Super antivirus site was terminated but I intended to try a scan with that one. Here's my hijack this log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:17:25 PM, on 5/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\P... Read more

A:Windows update redirected to google, anti-virus can't update, various anti-virus site connection terminated

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers
RELEVANCY SCORE 94.4

Hi - hope you can help!

Started several days ago - received a blue screen with "one of your disks needs to be checked for consistency: notice, but when it started running, it seemed to be deleting lots of files (many related to my anti virus software - CA Antivirus) and did not look right, so I turned the computer off quickly and disconnected the internet, suspecting that someone had accessed my computer somehow. When I rebooted, the Bad image notifications began immediately and I have not been able to get rid of them.

Am receiving Bad Image notification popup when CA Security Center starts and I see that others get this same issue with all different programs. I can stop the popup in the taskbar processes and close the window, but another window just pops up when the next file is accessed. Changed msconfig settings to keep CA from loading at startup and the popups did not return, but tried to access CA Antivirus from the start menu and got the popup. I also see several programs showing as installed when they have been uninstalled (Iomegaware is one of them) MS Security center says antivirus is running, but I cannot access it.

Have run CCleaner, MBAM and Dr. Web Cure it. Could not move or delete the Trojan files detected in Dr Web (Trojan.Wink and Trojan.Downloader), so I am worried that they are in the boot sector. I cannot find my original XP Home disks so I would like to avoid reformatting the drive if possible. Firewall is on and the virus scan has been... Read more

A:Bad Image Virus, Can't access anti virus program

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers
RELEVANCY SCORE 94.4

Hi guys

I found this thread that I hoped would help me (http://www.techsupportforum.com/f100...es-316265.html) but unfortunately my virus is even stopping me from going to microsoft.com so I am unable to follow through the instructions.

I recently re-formatted my PC but did not install any anti-virus straight away. Now I've got round to doing that, I went to the www.mcafee.com website to enter my serial code that my company provides me for free home anti-virus to find that the website says "Server not found". I called a couple of people and asked them to try the site and it worked for them and not me. I thought perhaps it was Firefox, so I closed that off and went back to IE7....still had the same problem. So I called up my ISP and they didnt have a clue of the problem. It was only until I called up a local "computer hospital" they informed me I could have a virus that stops me from installing anti-virus. I tried a few other anti-virus websites such as AVG, Kaspersky, and funnily enough all these sites came up with "Server not found" aswell!

I am using Windows XP
I am using Firefox as my Internet Browser
I connect to the internet using wireless broadband

I'm hoping that someone is able to help me with this problem. If you need anymore information about my PC then please let me know. I do have some computer knowledge but I am not an 'expert', so if you mention any technical terms these may need to be explained to me.

I am hoping t... Read more

A:Virus that stops access to anti-virus websites

Hello and welcome to TSF.

If you still require assistance, please follow the instructions in our sticky topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please note that the forum is very busy and if I don?t hear from you in three days this thread will be closed.

Read other 5 answers
RELEVANCY SCORE 94.4

The problem started a few days ago when I got a fake anti-virus, I promptly killed it with Malware Bytes Anti-Malware or so I thought. Later that day the computer restarted without prompting or warning and then kept restarting just after windows loaded. So I went into safe mode and ran AVG Malware bytes and Spybot. They all found stuff and killed them. I left the computer a bit and there was another Fake anti-virus. I killed it and then winlogin and severel other windows system files were being killed by Data Execution Prevention. After several attempt to remedy the problem we took drastic steps. WE formatted and reinstalled windows. We couldn't activate this windows because it wouldn't give us a installation ID so we found a disk with the version of windows the computer previous;y had from an older computer that got fried. Because of this there are 3 OS on the computer. The recovery drive which was not included in the format reads as: Unrecognized Operating System on drive C and XP Professional which should have been erased from the 2nd formatting from the current OS XP Media Center.

Now that we are able to logon we saw that the bugger was still there. I can get on the internet but the virus is preventing me from getting help anti-virus and anti-spyware sites are all not coming up. I do have 1 anti-virus that I have on CD but it's 2 years old and the virus won't let it update. Now I am here.

DDS:

DDS (Ver_09-06-26.01) - NTFSx86
Run by EnzoreDax at 11:44:31.53 on ... Read more

A:Virus Preventing Access to Anti-Virus websites

Hi DragonFox,

Wow.. This machine is heavily infected!!

Sorry for the delay in looking into your log, as we are extremely busy in this section of the forums. If you still require assistance and are not seeking help elsewhere, then please carry out my instructions.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

--------------------------------------------------------------

Please re-run DDS and post the resulting logs

Thanks

Read other 1 answers
RELEVANCY SCORE 94.4

I have a particularly nasty bugger that has apparently found it's way into my recovery files. The only anti-virus I have been able to put on the computer is 2 years old and the virus won't let it update and as the title says I cannot access the anti-virus parts of any anti-virus website. Preemptive thanks you for any help you can provide.

HiJackThis Log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:34:21 AM, on 7/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\System32\WLTRYSVC.EXE
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\bcmwltry.exe
H:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\Iexplore.exe
H:\WINDOWS\ehome\ehtray.exe
H:\WINDOWS\system32\WLTRAY.exe
C:\windows\ld12.exe
C:\windows\pp10.exe
H:\Program Files\Softwin\BitDefender10\bdmcon.exe
H:\Program Files\Softwin\BitDefender10\bdagent.exe
H:\WINDOWS\system32\RUNDLL32.EXE
H:\Program Files\HostsMan\hm.exe
H:\Program Files\Mozilla Firefox\firefox.exe
H:\WINDOWS\system32\wuauclt.exe
H:\WINDOWS\system32\svchost.exe
H:\Program Files\HiJackThis\HiJackThis.exe

O2 - BHO: H:\WINDOWS\system32\grffr83hn.dll - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} -... Read more

A:Virus Preventing Access to Anti-Virus websites

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 92

This is my first post on this site, and I turn to you in desparation!

I'm not sure if I have two problems, or one problem manifesting itself in two different ways, which is why I have combined this post.

I have somehow gained a programme named "Antivirus 2008" which is constantly warning me that I have 688 viruses on my computer. When this initially started, I ran my free copy of AVG. This warned me of the presence of Trojan Horses, but it was unable to remove them. The full version of AVG would, I was assured, sort the problem. In a moment of madness, I then purchased the full AVG8 programme.

On running AVG8 it informed me of the presence of a huge number of trojan horses, and offered to heal them. I accepted that option, and was informed that the trojans had been healed (or maybe it was removed/sent to the vault - to be honest, I'm getting a bit punch drunk now, and I'm not really sure)

Following this, AVG "Resident Shield Alerts" keep popping up every 15-20 seconds warning me of more Trojan horses. When I click "Remove Threats" or "Heal", sometimes I get a warning reply "Some files could not be found." Sometimes I don't. Either way, it doesnt make any difference - the next warning pops up about 20 seconds later. This is true whether I tick the "power user" box, or not.

The exact details given by AVG are :

File Name: C:\WINDOWS\system32\ppchcgq1j0elfv.exe
Threat Name: Troja... Read more

A:Anti Virus/trojan, Anti Virus Xp 2008 / Trojan Horse Downloader.fraudload.p

Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list ... Read more

Read other 1 answers
RELEVANCY SCORE 92

Hello!

I've been doing a springclean for my PC, and I would be grateful if someone would check my hijack this log for problems.

I've run all of my anti-spyware and AVG programes first. But, I have a question: after my programes have scanned for problems and put all the bad stuff into quarentine, do I need to do anything else with them?

I'm not sure if I should be trying to find ways of removing trojans etc. or if it is ok to just leave them in the quarentine area indefinatly.

Thanks for your help!

-------------

Logfile of HijackThis v1.98.2
Scan saved at 13:43:41, on 24/04/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\AntiVirusKit\AVKService.exe
C:\Program Files\AntiVirusKit\AVKWCtl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\pctspk.exe
C:\Program Files\AntiVirusKit\AVKPOP.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\System32\ctfmon.exe
C:\freeserve\freeserveconnectionkit\atdialler1.exe
C:\Pro... Read more

A:Solved: A hijack this log, and a quick question re: anti-spyware and anti-virus programes

Read other 7 answers
RELEVANCY SCORE 92

Running Windows XP, Home Edition, Version 2002, Service Pack 3, MSI Motherboard, 512MB Ram, Pentium 4 - 2.4GHz CPU.I used to have Spybot, but after some point whenever I tried to run it the computer would reset. Now, I've gotten a few messages from Windows Defender that there is a trojan on the computer. I can run a quick scan and remove what shows up, but when I try to run a full scan, the computer resets. I try to scan the computer with McAfee anti-virus, I can run a quick scan no problems, but when I try to run a full scan, the computer resets. I know there is at least 1 trojan/virus, but any program I try to run to get rid of the problem makes the computer reset. The latest software I installed is a-squared, and I can do a quick scan and find/fix a few problems, but when I do a full scan (in safe mode as administrator) a message pops up saying that the computer is going to shut down, NT AUTHORITY/SYSTEM.Please help before I tear out what's left of my hair.Pasted and attached.DDS.txt============DDS (Ver_09-01-07.01) - NTFSx86 NETWORK Run by Administrator at 22:34:33.51 on Fri 01/16/2009Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_11Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.175 [GMT -5:00]============== Running Processes ===============C:\WINXP\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINXP\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:�... Read more

A:Multiple Trojans, PC resets when full-scan anti-virus or anti-malware is run

Hello AdamLinn13Welcome to Bleeping Computer. =====================Please re-open Hijackthis and click on "Do a system scan only"Then place a check mark next to these entries below:R3 - Default URLSearchHook is missingO2 - BHO: CMVideoPlugin - {08DEA348-F510-45FD-A6EC-CF3BE0917C5E} - C:\WINXP\system32\CMVideo.dllO2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dllO4 - HKLM\..\Run: [Framework Windows] frmwrk32.exeO4 - HKLM\..\Run: [Rrokuwip] rundll32.exe "C:\WINXP\Gxizahopira.dll",eO4 - HKLM\..\Run: [Ngewok] rundll32.exe "C:\WINXP\exufijocifalut.dll",eO18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dllNow click on Fix Checked and then close Hijackthis.====================================================Download ComboFix from one of these locations:Link 1Link 2Link 3* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine be... Read more

Read other 90 answers
RELEVANCY SCORE 92

Survey: What Anti-Virus, Anti-Malware, Web-Protection, Fully-Featured Suite would you consider to be the best when assessing it from a price per "quality/quantity of features" perspective?

(Consider that the user will be using it for a Windows 10 laptop and desktop, & a Windows 7 desktop -- more Win 7 and 10 systems if possible!)

Read other answers
RELEVANCY SCORE 92

Hello,

I have a problem that is far beyond my limited skills. One of our people has a laptop that has either malware or a virus infecting it. Two symptoms are present: first, when using firefox web pages get redirected to advertising or to unrelated google searches; second, the machine seems more sluggish than usual.

I have tried to download anti-spyware software (e.g. Spy Sweeper, CounterSpy, MalwareBytes, Superantispyware, PC Doctor) and nothing works. In some cases such as Counterspy and PC Doctor, the executable will run but the program will not update (and thus, not allow for a scan). In other cases such as MalwareBytes, the executable simply will not run.

I have run a Trend Micro anti-virus scan. It seems to detect something but it crashes before the scan can complete. The same thing happens with Panda Activescan. Last night, I ran Panda Activescan for over 8 hours. When I woke up, the scan had frozen at the 52% point and had found 1 infected file, which it didn't appear to clean up.

Anyway, I'd really appreciate any help.
Best regards,
Jordan

A:HELP! -- Anti-spyware / Anti-virus doesn't work; malware crippling our machine

Uninstall all of the programs but Super Antispyware, Trend Micro and MalwareBytes AntiMalware.Find the MBAM.exe and rename it BAMM.com by right clicking on the file and choosing rename.Download the manual updates for MBAM from the link below. Double click on it to install. http://www.malwarebytes.org/mbam/database/mbam-rules.exeINSTRUCTIONS FOR USING MBAM:http://www.bleepingcomputer.com/forums/ind...t&p=1100727

Read other 1 answers
RELEVANCY SCORE 92

Hello, I consider myself a fairly advanced computer user, but I'm having an issue I'm 99% sure is MalWare related. My laptop freezes CONSTANTLY, sometimes out of nowhere, and sometimes when I walk away for 5 minutes. I have tried numerous times to run AVG, Ad-Aware SE, and both freeze shortly after the scan starts (also tried in SAFE MODE). Now sometimes I can browse the we for hours, but as soon as a start a scan, install, or update, these issues are more common. I am fairly confident that this is not a hardware issue, since I've ran advanced diagnostics on them all, including BIOS. I have a HiJack This Log, and help would be greatly appreciated!

HiJackThis.log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:17:22 AM, on 9/22/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\snmp.exe
C:\WINDO... Read more

A:Unable to Run ANY Anti-Virus or Anti-Spyware programs, Comp freezes every 5 minutes.

BUMP!

--sorry, I'm desperate.
 

Read other 3 answers
RELEVANCY SCORE 92

According to a story at Washingtonpost.com, the latest definitions for Microsoft's Anti-Spy flags Symantec's Norton Antivirus as a trojan and prompts users to delete essentials of the program. Users who follow the instructions hose their installation of Norton, requiring Windows registry edits and complete removal/reinstallation of Norton.

Microsoft's support forum is filling up with complaints, many from businesses that have been hard hit. This should be a cautionary note about deploying beta products in production environments.
 

A:READ!!!Microsoft Anti-Spyware Deleting Parts of Norton Anti-Virus

Read other 8 answers
RELEVANCY SCORE 92

i have uninstalled norton anti-virus 2008 from my computer however it is still coming up in the start menu and loading on startup. i am wondering how i can remove this and other things from my startup? i can not install any other anti-virus until this is removed.

note: i tried removing them from startup once and it keeps telling me i have put it in a specific startup mode. but when i change the mode it still does not work.

i also removed a instance of windows xp from the boot.ini section that i did not need and when i change the mode the other instace comes back up on reboot.
 

A:Solved: help! norton anti-virus 2008 cant remove wont let me install another anti-vir

Read other 9 answers
RELEVANCY SCORE 91.6

Good morning everyone,
Frequent visitor, first time poster of this forum. I want to thank anyone in advance for committing any amount of time to my problem. I'm hoping someone has some experience with this issue. Allow me to explain:

Yesterday, I woke-up my computer and opened up my browser (I use Google Chrome). As soon as I clicked to open the browser, I noticed a Windows Explorer Pop-up. I have attached a picture of what this box looks like, but to describe it for those who are not able to open the attachment: The windows header said "Mod Info" and the Content said "BC LOADED" the only available options for me to click were "OK" or the "Close" button at the top right. Without clicking anything the box then disappeared and Google Chrome opened as usual. This behavior was unexpected, I've never seen this before. Worrying I had some kind of Spyware or Malware, I decided to try running my AV program. I use Avast Free.

I went to look for the process in the hidden icons list on my taskbar, where it usually resides. I didn't see it there, which was concerning. I tried running the program from the start menu, but after clicking it, nothing opened. This was also a red flag that something must be wrong. So I decided to try and run Malwarebytes Anti-Malware. This program would also not open when prompted.

I decided to scan google for my symptoms to look for recommended fixes. Several tech support forums suggested to those who presented simil... Read more

A:Anti-Virus/Anti-Malware Programs Blocked Even in Safe Mode

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Press the Windows "logo" key and "R" key then copy/paste the following into the Run box and click OK:

%temp%\dds.txt

A text file should open. Please copy/paste the contents of that file in your next reply.

------------------------------------------------------

Read other 14 answers
RELEVANCY SCORE 91.6

How to Remove Win 7 Anti-Spyware 2011 (Fake Anti-Virus Infections)





Quote:
If your PC is infected with the Win 7 Anti-Spyware 2011 malware or something similar, you?ve come to the right place, because we?re going to show you how to get rid of it, and free your PC from the awful clutches of this insidious malware (and many others)
Win 7 Anti-Spyware 2011 is just one of many fake antivirus applications like Antivirus Live, Advanced Virus Remover, Internet Security 2010, Security Tool, and others that hold your computer hostage until you pay their ransom money. They tell you that your PC is infected with fake viruses, and prevent you from doing anything to remove them.
This particular virus goes by a lot of names, including XP Antispyware, Win 7 Antispyware, Win 7 Internet Security 2011, Win 7 Guard, Win 7 Security, Vista Internet Security 2011, and many, many others. It?s all the same virus, but renames itself depending on your system and which strain you get infected with.


Source ...

A:How to Remove Win 7 Anti-Spyware 2011 (Fake Anti-Virus Infections)

Thanks for the information. I hope I never have to use it.

Read other 2 answers
RELEVANCY SCORE 91.6

I recently downloaded PC Security Shield (supposedly a good anti virus program) and Spyware Terminator (antispyware) and noticed that their icons sometimes, do not show up in my system tray when I boot up. And it stays like that. I've had no icons for three days now...huh?

I've looked up this problem in the accompanying (Security Shield) help menu and it wasn't any help....but it basically states no icon = no protection....so what the bejeepers can I do to fix this problem?
 

A:Anti virus/anti spyware programs missing from system tray

Just a quick thought, go to start-up options and see if they are listed as due to run on start-up, if you have no suitable programme to view your start-up programmes go to run and type msconfig and check the start-up tab
 

Read other 2 answers
RELEVANCY SCORE 91.6

Please help. I am working on a network and need a corporate anti-virus program and anti-spyware programs? I know McAfee and Symantec offer something, but I know the personal editions I have had a less than nice experience. Any suggestions?

A:Need A Corporate Anti-virus Program And Anti-spyware Programs? Any Suggestions

Take a look at this Spysweeperhttp://www.webroot.com/enterprise/products/

Read other 4 answers
RELEVANCY SCORE 91.6

Are there any free, updated and/or recent Anti-Virus & Anti-Malware combos that could offer better protection than windows defender for windows 10?

A:Good Free Windows 10 Anti-Virus & Anti-Malware Combos

If you don't want to pay then I would recommend avast! Free Antivirus or Bitdefender Anti-virus Free Edition if you prefer not to use Windows 8/10 Defender.For more suggestions such as Sophos, Panda,and Avira see Choosing an Anti-Virus Program.Also see Supplementing your Anti-Virus Program with Anti-Malware Tools.

Read other 11 answers