What the Tech logo
Welcome! Register for a free account (or login) > How does it work?
  1. Quickly register. It will only take 60 seconds.
  2. Start a new topic. Ask your question. Wait for an email reply.
  3. Is your system infected? Begin reading the malware removal guide.
register button
9 Pages V   1 2 3 > »   
Reply to this topicStart new topic
> Google redirects & spybot,hijack this problems
arfon.jones
post Oct 11 2009, 04:59 PM
Post #1


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



I Have had problems with my computer since detecting the virus antivirus pro 2010 . I have managed to delete that . I am now having several problems with
1. google redirects to other search engines
2 .Have installed spybot s&d and trying to run it have the error,windows cannot acces the specific device,path,or file. you may not have the appropriate permission to acces the item.
3. Have tried downloading hijackthis which also refuses to run
4. avg 8.5 will not perform a system scan but shows that everything is working. (i have tried uninstalling it and re install with no luck)
5. reg cure and spyware doctor work and scan the system find infections and cure them but they keep re-apearing on the next scan.
I think i have included everything,my operating system is win xp
I hope you can help many thanks Arfon
Go to the top of the page
 
+Quote Post
Raktor
post Oct 12 2009, 07:28 PM
Post #2


SuperMember
Group Icon

Group: Malware Team
Posts: 1,414
Joined: 29-October 08
From: Melbourne, Australia
Member No.: 82,162
Operating System: Windows 7 Professional 64bit, Windows XP Pro SP3, Mac OS X 10.5, Debian 5.0





Hi, welcome to the WTT Forums. My username is Raktor, and I would be glad to help you with your malware issues. I'd be grateful if you would note the following:

  • Absence of symptoms does not always mean the computer is clean
  • Please do not run any scans or fixes without my direction.
  • Finally, stay with this topic until I give you the final 'All clear' post.


1) exeHelper
Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

2) DDS

Please download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
  • When done, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt
  • Save both reports to your desktop.


3) RR
Please download RootRepeal.zip.
Save it to your Desktop. Alternate download links here or here.
Please print these instructions, you will not have an Internet connection!
If you have a 3rd party "unzipping" program...use it to open the zipped file...then skip to Step 5. Otherwise...
  1. Right click on RootRepeal.zip and select "Extract All"....
  2. Click Next on the "Welcome to the Compressed (zipped) Folders Extraction Wizard."
  3. Click on the Browse...button, then click on Desktop, then click OK.
  4. Once done, check (tick) the Show extracted files box and click Finish.
  5. Before running RootRepeal:
      Disconnect from the Internet as your system will be unprotected while using this tool.
      Close all programs and temporarily disable your anti-virus, Firewall and any anti-malware real-time protection before performing a scan.
  6. Open the RootRepeal folder and double-click on RootRepeal.exe to launch it.
  7. When the program opens, click the Report tab at the bottom, then click the Scan button.
  8. In the Select Scan, dialog which asks What do you want to include in the scan?, check ALL the boxes.
  9. Click OK.
  10. In the Select Drives, dialog Please select drives to scan: select all drives showing, then click OK.
    The scan can take some time to finish. Do not use the computer while the scan is running.
    When the scan has completed, a list of files will be generated in the RootRepeal window.
  11. Click on the Save Report button and save it as "rootrepeal.txt" to your desktop.
  12. Close and exit RootRepeal
  13. Double-click on the file rootrepeal.txt... Notepad will open... copy/paste the file contents in your next reply.


Make sure to enable your anti-virus, Firewall and any other security programs you disabled.
Note: If RootRepeal cannot complete a scan and results in a crash report, try repeating the scan in "safe mode".

4) What You Will Need To Post:
  • exeHelper log
  • DDS logs
  • RR log
Go to the top of the page
 
+Quote Post
arfon.jones
post Oct 13 2009, 12:56 PM
Post #3


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



Hello
Thanks for your reply,
I have downloaded exeHelper and ran it succesfuly. I have downloaded DDS double clicked to run as instructed a black window opens for a few seconds then closes. I disabled the firewall, avg resident shield and spyware doctor and closed regcure and spybot.maybe theres something that im not doing correctly ?.
Go to the top of the page
 
+Quote Post
Raktor
post Oct 14 2009, 06:05 AM
Post #4


SuperMember
Group Icon

Group: Malware Team
Posts: 1,414
Joined: 29-October 08
From: Melbourne, Australia
Member No.: 82,162
Operating System: Windows 7 Professional 64bit, Windows XP Pro SP3, Mac OS X 10.5, Debian 5.0



Post the exeHelper log. smile.gif

Delete your current copy of DDS - redownload it and save it as explorer.com, then try to run it.

Either way, proceed with RootRepeal and post that log as well.
Go to the top of the page
 
+Quote Post
arfon.jones
post Oct 14 2009, 01:44 PM
Post #5


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



Hello
I am writing this from a borrowed laptop as i have encountered a major problem.
I am unable to get the pc to boot up properly it gets to the windows logo with blue strobing lights then goes to a grey blank screen with a mouse pointer which is moveable but nothing to click on. I have also tried going into safe mode with exactly the same results.all this hapened before your last post. Also obviosley i am unable to shut down
Go to the top of the page
 
+Quote Post
Raktor
post Oct 14 2009, 03:35 PM
Post #6


SuperMember
Group Icon

Group: Malware Team
Posts: 1,414
Joined: 29-October 08
From: Melbourne, Australia
Member No.: 82,162
Operating System: Windows 7 Professional 64bit, Windows XP Pro SP3, Mac OS X 10.5, Debian 5.0



To turn the computer off - hold down the power button for approximately ten seconds.

Please reboot your computer in Safe Mode by doing the following:
  • Restart your computer.
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually.
  • Instead of Windows loading as normal, a menu with options should appear.
  • Select the first option, to run Windows in Safe Mode, then press Enter.
  • Choose your usual account.
Go to the top of the page
 
+Quote Post
arfon.jones
post Oct 14 2009, 05:12 PM
Post #7


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



hello
Was able to shut down the computer. tried rebooting as instructed by pressing f8, got to the menu and choose safe mode which works, but again am only getting
a grey screen with mouse pointer which moves but nothing to choose !
Go to the top of the page
 
+Quote Post
Raktor
post Oct 14 2009, 05:16 PM
Post #8


SuperMember
Group Icon

Group: Malware Team
Posts: 1,414
Joined: 29-October 08
From: Melbourne, Australia
Member No.: 82,162
Operating System: Windows 7 Professional 64bit, Windows XP Pro SP3, Mac OS X 10.5, Debian 5.0



Press Ctrl + Shift + Esc and see if a window appears. If so, click File -> New Task and enter explorer.exe and press enter.
Go to the top of the page
 
+Quote Post
arfon.jones
post Oct 14 2009, 05:44 PM
Post #9


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



Hi tried your instruction but nothing happening
Go to the top of the page
 
+Quote Post
Raktor
post Oct 15 2009, 06:09 PM
Post #10


SuperMember
Group Icon

Group: Malware Team
Posts: 1,414
Joined: 29-October 08
From: Melbourne, Australia
Member No.: 82,162
Operating System: Windows 7 Professional 64bit, Windows XP Pro SP3, Mac OS X 10.5, Debian 5.0



Did Ctrl + Shift + Esc bring up a window? How about Ctrl + Alt + Del?
Go to the top of the page
 
+Quote Post
arfon.jones
post Oct 16 2009, 10:57 AM
Post #11


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



Hi tried both instructions in safe mode and normal mode no window appears,just a black screen with mouse pointer as before pullhair.gif
Go to the top of the page
 
+Quote Post
Raktor
post Oct 17 2009, 07:27 PM
Post #12


SuperMember
Group Icon

Group: Malware Team
Posts: 1,414
Joined: 29-October 08
From: Melbourne, Australia
Member No.: 82,162
Operating System: Windows 7 Professional 64bit, Windows XP Pro SP3, Mac OS X 10.5, Debian 5.0



When booting at the F8 menu, try Last Known Good Configuration and see if that fixes it.

If that does not work, try VGA Mode from that F8 menu. Let me know how things go.
Go to the top of the page
 
+Quote Post
arfon.jones
post Oct 18 2009, 03:52 PM
Post #13


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



Hi I tried your sugestion of booting to last known good config. and also vga mode,the result is the same. Im just wandering if the hard drive has gone bust . But i am hearing it grind away up to the point of the black screen then it goes silent.
Go to the top of the page
 
+Quote Post
noahdfear
post Oct 18 2009, 04:30 PM
Post #14


Silver Member
Group Icon

Group: Malware Expert
Posts: 351
Joined: 14-June 05
Member No.: 34,633
Operating System: XP Pro & Vista
MVP


Hi arfon,

If your machine is a laptop, do you by chance have an external monitor that can be connected? If the answer to both is yes, please connect it and start the computer. When you get to the screen where you have only a cursor, press F2 (I think - should have what appears to be a monitor screen on it) to see if you get a different display on the external monitor.

Do you have the ability to burn a cd, and a blank cd?
Go to the top of the page
 
+Quote Post
arfon.jones
post Oct 18 2009, 04:37 PM
Post #15


Authentic Member
**

Group: Authentic Member
Posts: 68
Joined: 4-October 09
Member No.: 88,235
Operating System: windows xp



no my computer is a desktop pc.
Go to the top of the page
 
+Quote Post

9 Pages V   1 2 3 > » 
Reply to this topicStart new topic

 


RSS Time is now: 19th March 2010 - 02:53 AM
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
Memory Forums | Auto Repair Forum
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy