1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Virus alert, no cd, errors running programs

Discussion in 'Malware and Virus Removal Archive' started by pwin, 2008/09/23.

  1. 2008/09/23
    pwin

    pwin Inactive Thread Starter

    Joined:
    2008/09/23
    Messages:
    1
    Likes Received:
    0
    Seems I'm picked up something..annoying. I've seen this around the forum but I was unable to follow any of the steps they took for various reasons.

    This virus posts "Virus alert" on anything displaying a time (The time in the taskbar, and the date created property on all or almost all files). Windows are constantly popping up with notices about a virus (I knew it was fake when I saw something saying it was a 2009 version and they were opening in Internet Explorer). The C drive and the Run button in the start menu have disappeared. I CAN boot up in safe mod. I notice I now get other problems when NOT starting up in Safe Mode though. Windows freezes, and a few strange icons are in the taskbar: an arrow pointing down, A, and 1. They all have a grey frame around them.

    I'm unable to run Malwarebyte's Anti-Malware. It comes up with an error that causes it to close. The error is the standard MS "An error has occurred <snip> send error report ". I also get this when trying to run cleanmgr.exe.

    Things I've tried:
    -I got an error from something in a folder named PCHealth. I found files named 0 1 2 3 (etc). I don't recall what kind of files. I booted it up into safe mode and deleted them.

    -Don't know if it is related or not. I found more in the Windows folder. These here were icons. I deleted these, and a log file "0.log ". and a file named 1.ico.

    -I downloaded Anti-Malware and ran it. Tried performing a Quickscan and it ran for about 15 minutes before I got the error noted above. I can't recall the file is stopped on. Running it again to see if it happens again.

    -Tried running Cleanmgr. It was one of the steps in another thread. I got the same error as I did with Anti-Malware.

    -(Edit: forgot to add this in)I downloaded RSIT. Set it for 3 months and press okay. When it started performing a registry dump, I got this message "Autolt Error" Line-1: Error: Error parsing function call.

    I can boot the computer up in safe mode with networking just fine. However I can not visit this site on that computer (strange..only some sites work). I'm using a flash drive to transfer programs onto the infected computer.
     
    pwin,
    #1
  2. 2008/09/24
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Welcome to WindowsBBS pwin :)

    • Click here
    • If it launches a file download dialog for download_file.exe from noahdfear.net, click Save and put it on your flash drive then transfer to the desktop of the affected computer.
    • Double click the file to run it.
    • download_file.vbs file should appear on the desktop, and shortly there-after a renamed copy of ComboFix.
    • Please note that the vbs file is recognized by some security programs as a Trojan-Downloader.JS and may try to block it. I assure you, the file is safe.
    • If successful, shut down all open windows and programs, double click the renamed ComboFix and follow the prompts.
    • It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall
     

  3. to hide this advert.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.