keyongtech


  keyongtech > windowsxp.* > windowsxp.help_and_support > 05/2009

 #1  
05-13-09, 02:46 PM
John McKenzie
Hi,
I let my nephew use my computer and now none of my spyware removal tools
work i.e. Malwarebytes, SuperAntiSpyware, Ad-Aware.

Do any of you have any idea to discover what is going on. I am
relatively certain that the computer is infected with something.
 #2  
05-13-09, 02:57 PM
Leythos
Use my Remove-it software, it will remove that malware from your system.
Choose yes for all options when prompted. Download it here
http://www.ms-mvp.org/
 #3  
05-13-09, 03:02 PM
John McKenzie
John McKenzie wrote:
> Hi,
> I let my nephew use my computer and now none of my spyware removal tools
> work i.e. Malwarebytes, SuperAntiSpyware, Ad-Aware.
>
> Do any of you have any idea to discover what is going on. I am
> relatively certain that the computer is infected with something.

I might also add that the restore point does not work and the OS is Win
XP Pro SP3
 #4  
05-13-09, 03:15 PM
Leonard Grey
That was not the real Leythos--he would never give that advice--it's
Patrick Butts posing as Leythos.

To answer your question: Your computer is almost certainly infected with
malware. There are specific types of malware that disable your ability
to use or update your security software.
 #5  
05-13-09, 03:37 PM
Bob Lucas
Some malware infections have the ability to block access to
anti-virus and security websites. They can also interfere with
the functionality of antivirus and spyware removal tools.

The URL at
http://tech.amikelive.com/node-144/t...-removal-guide
may help. The instructions describe how to download Malwarebytes
to an uninfected computer. Then, you rename the program to avoid
detection by the malware - and use it to remove the infection.

A second possibility is to remove the hard drive from the
infected computer. Then, connect the drive physically to an
uninfected computer (as a slave drive or via a USB caddy).
Ensure the second computer has up to date protection against
viruses and similar malware. However, the risk of
cross-infection is small, because the second computer won't need
to boot from the infected disk.

Use the uninfected computer to run Malwarebytes and perform a
full scan of the infected drive. Then, you should use the
uninfected computer to perform additional scans, using
alternative anti-virus and spyware removal tools.

One word of warning. Another contributor to this thread has
advised you to "Use my Remove-it software". As with any
download, you do so at your own risk.


"John McKenzie" <jmckenzie> wrote in message
news:1492
[..]
 #6  
05-13-09, 04:09 PM
Jose
On May 13, 9:46 am, John McKenzie <jmcken> wrote:
> Hi,
> I let my nephew use my computer and now none of my spyware removal tools
> work i.e. Malwarebytes, SuperAntiSpyware, Ad-Aware.
>
> Do any of you have any idea to discover what is going on.  I am
> relatively certain that the computer is infected with something.


Yes. Some of this malicious software will just not allow executables
that might be used to remove them to run just by the name of the .exe
file that shows up as a process. MBAM shows up as mbab.exe in Task
Manager so may not run.

I would stick with MBAM and SAS. Locate the mbam.exe file and make a
copy called john.exe and then run john.exe and see what that turns
up. If still problems, do the same for SAS.

Lately, I have fixed several where things like regedit, cmd, and the
System Restore utility won't run. Try regedit and cmd just for fun
and let us know about that. The bad software doesn't want you do run
anything to remove it or go to any WWW sites that might help you
(except this one).

Now if your regedit and cmd still don't work but everything else now
does, we can fix that too.

Jose
 #7  
05-13-09, 04:29 PM
Leythos
In article <klAOl.26466$c45.6628>, trt
says...
[..]
> Choose yes for all options when prompted. Download it here
> [..]
>
> --
> The Real Truth [..]
> *WARNING* Do NOT follow any advice given by the people listed below.
> They do NOT have the expertise or knowledge to fix your issue. Do not waste
> your time.
> David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.
>


Abuse reported to prodigy and att.
 #8  
05-13-09, 06:09 PM
John McKenzie
Jose wrote:
[..]
> Lately, I have fixed several where things like regedit, cmd, and the
> System Restore utility won't run. Try regedit and cmd just for fun
> and let us know about that. The bad software doesn't want you do run
> anything to remove it or go to any WWW sites that might help you
> (except this one).
>
> Now if your regedit and cmd still don't work but everything else now
> does, we can fix that too.
>
> Jose

both cmd and regedit work
 #9  
05-13-09, 06:47 PM
John McKenzie
John McKenzie wrote:
> Jose wrote:
> both cmd and regedit work

Disk Defragmenter does not
 #10  
05-13-09, 07:20 PM
Jose
On May 13, 1:47 pm, John McKenzie <jmcken> wrote:
> John McKenzie wrote:
>>
>>

>
> Disk Defragmenter does not


Okay, did you try renaming MBAM.EXE and running the copy or did I miss
a post?
 #11  
05-13-09, 07:24 PM
Jose
On May 13, 1:47 pm, John McKenzie <jmcken> wrote:
> John McKenzie wrote:
>>
>>

>
> Disk Defragmenter does not


Disk Defragmenter would be:

Start, Run, dfrg.msc

or, Start, Run, cmd and then c:\windows\System32\dfrg.msc

Try MBAM (or your copy) first.

What does "does not (work)" mean?

Does a copy of dfrg.msc work?
 #12  
05-13-09, 08:17 PM
John McKenzie
Jose wrote:
> On May 13, 1:47 pm, John McKenzie <jmcken> wrote:
>
> Disk Defragmenter would be:
>
> Start, Run, dfrg.msc
>
> or, Start, Run, cmd and then c:\windows\System32\dfrg.msc
>
> Try MBAM (or your copy) first.
>
> What does "does not (work)" mean?
>
> Does a copy of dfrg.msc work?

it loads OK but then the message disk fragmented could mot run.
 #13  
05-13-09, 08:17 PM
Elmo
John McKenzie wrote:
> Hi,
> I let my nephew use my computer and now none of my spyware removal tools
> work i.e. Malwarebytes, SuperAntiSpyware, Ad-Aware.
>
> Do any of you have any idea to discover what is going on? I am
> relatively certain that the computer is infected with something.


http://www.techmixer.com/free-bootab...download-list/
 #14  
05-13-09, 09:29 PM
Jose
On May 13, 3:17 pm, John McKenzie <jmcken> wrote:
> Jose wrote:
>>
>>

>
> it loads OK but then the message disk fragmented could mot run.


Disk fragmented could mot run?

Well, see what MBAM or your copy has to report. You should do that
first.
 #15  
05-13-09, 10:12 PM
David H. Lipman
From: "John McKenzie" <jmckenzie>


>> Does a copy of dfrg.msc work?

| it loads OK but then the message disk fragmented could mot run.



Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...HJTInstall.exe

Then post the contents of the HJT log in your post with a full explanation of your problem
and what you have done to date in one of the below expert forums...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://www.malwarebytes.org/forums/i...hp?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
[url down]
http://www.5starsupport.com/ipboard/...p?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

Similar Threads
Spyware-guard 2008 removal guide! How to remove spyware guard 2008manually

Heres free spyware guad 2008 manual removal guide for those who are infected by this rogue spyware as it has infected millions of computers. Spyware Guard 2008, also known as...

Spyware Removal

you can try mcafee's freescan found at [..] and see if it could remove the trojan. i've never been infected with a virus in more than ten years using mcafee...

Spyware removal

Does anyone have a preference as to which spyware removal program is the best? I have used spybot but it doesn't get all of them. I tried the scan from XoftSpy but you have...

spyware removal and popup removal

I have Windows XP and a firewall and updates regularly. But lately there's a lot of popups and spyware on my computer....or at least that's what the scans show from these...

Help! - spyware removal

Hi, I appear to be constantly removing spyware from my syustem, the most typical is called "Doubleclick" whenever I remove it after 5-10 minutes of browsing it reappears and...


All times are GMT. The time now is 11:15 PM. | Privacy Policy