Please register or login. There are 0 registered and 1651 anonymous users currently online. Current bandwidth usage: 326.30 kbit/s December 17 - 04:28pm EST 
Hardware Analysis
      
Forums Product Prices
  Contents 
 
 

  Latest Topics 
 

More >>
 

    
 
 

  You Are Here: 
 
/ Forums / Windows XP, 2000, 98 /
 

  Malware destroying my computer - urgent help needed 
 
 Author 
 Date Written 
 Tools 
Richard W May 26, 2011, 07:43am EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List

Edited: May 26, 2011, 07:47am EDT

Replies: 5 - Views: 2748
I've been battling with severe virus/malware infection for the last 3 days.

I have a "google redirect" virus causing problems, all my browsers are repeatedly crashing, I have been having frequent "blue screen of death", checkdisk scans and errors saying "An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive fo errors".

In Task Manager there are numerous rogue processes running with weird names: Some of them are:

0.012263056140129458.exe
0.28131090303605666.exe
0.4707784948372955.exe
gODYLqGmtHs.exe
oC11467KoH

EDIT: Got cut off there as my browser/task manager crashed and closed down again

Task manager now not working. Had another error message reporting that a Trojan is on the PC and affecting executable files and using my personal information (?)

I have tried using many forms of anti-malware such as MalwareBytes, ComboFix, AVG, SpyNoMore and none of these have worked at all. I thought I had got rid of the problem but clearly not.

I am unable to use this computer any more until it is fixed so I will have to resort to my laptop. But I really need this PC fixing, I'm at a loss to know what to do with it. Please help me.

Edit: Just so you know this PC I'm on is Windows XP not 2000.


---------------------------------------------------
Dell Dimension XPS R450
Intel Pentium II at 450Mhz
196MB of RAM
20GB hard drive
ATi Rage 128 GL
Windows 2000 Pro
Want to enjoy fewer advertisements and more features? Click here to become a Hardware Analysis registered user.
john albrich May 26, 2011, 08:39am EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List

Edited: Jun 02, 2011, 07:07am EDT

 
>> Re: Malware destroying my computer - urgent help needed
There are some freeware downloads available that try to eliminate or stop malware while an AV program tries to eliminate it/them. These are designed to be used in-situ, on the infected computer.

In general, I would start with self-booting programs first, and keep Windows out of the picture as much as possible until you have resolved the issue and scrubbed the malware.

An alternative of course, while keeping the chance of infecting other important machines as low as possible, is to install Windows on a simple, non-networked system, install a top-notch robust and UP-TO-DATE anti-malware suite on the system, then connect your infected drives to this "sacrificial" system and run the anti-malware programs against the infected drives. If you have a spare drive, you can even
1) remove ALL your other drives from that system,
2) power down and perform a CMOS reset procedure as outlined in your user guide
3) install the available uninfected harddrive,
4) clean install of Windows on that drive
5) install anti-malware on that drive and activate it
6) Use USB adapter. While the system is ALREADY running, connect an infected drive via USB and using shift key method so the system does not try to run any programs or code on that drive
Note: disinfect your infected drives one at a time
7) when/if you've eliminated the malware, restore things to normal. It would be prudent to wipe the system drive again, and reinstall Windows again (or restore from an earlier per-malware backup), install the anti-malware suite, and rerun against the system drive.


Here are a few listed in no particular order.

Microsoft Standalone System Sweeper
http://www.majorgeeks.com/Microsoft_Standalone_System_Sweeper_d6993.html
Helps you start an infected PC and perform an offline scan to help identify and remove rootkits and other advanced malware. In addition, Microsoft Standalone System Sweeper Beta can be used if you cannot install or start an antivirus solution on your PC, or if the installed solution can’t detect or remove malware on your PC. Like Kaspersky Virus Removal Tool and similar programs, you need to install and use a different anti-virus program for routine use.

RKill
http://majorgeeks.com/RKill_d6848.html
RKill was developed at BleepingComputer.com and attempts to terminate known malware processes so that your normal security software can then run and clean your computer of infections. When RKill runs it will kill malware processes and then import a Registry file that removes incorrect file associations and fixes policies that stop us from using certain tools. When finished it will display a log file that shows the processes that were terminated while the program was running.

As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again. Instead, after running RKill you should immediately scan your computer using some sort of anti-malware or anti-virus program so that the infections can be properly removed.


Kaspersky Virus Removal Tool 05.25.2011 [ 107 MB | Freeware | Win 2000/03/08/XP/Vista/7]
http://majorgeeks.com/Kaspersky_Virus_Removal_Tool_d4515.html
The product will scan the specified locations for any virus threats and remove them or send to Quarantine folder.
Kaspersky Virus Removal Tool does not provide resident protection for your computer. After disinfecting a computer, you are supposed to remove the tool and install a full version of antivirus software.


Kaspersky TDSSKiller 2.5.2.0 [ 1.22 MB | Freeware | Win7/Vista/XP] Editors Pick
http://majorgeeks.com/Kaspersky_TDSSKiller_d6895.html
Kaspersky Lab has developed the TDSSKiller utility that allows removing rootkits. A rootkit for Windows systems is a program that penetrates into the system and intercepts the system functions (Windows API).



(Self-booting)
Avira AntiVir Rescue System 05-25-2011
http://majorgeeks.com/Avira_AntiVir_Rescue_System_d6005.html
The Avira AntiVir Rescue System a linux-based application that allows accessing computers that cannot be booted anymore. Thus it is possible to repair a damaged system, to rescue data or to scan the system for virus infections.


edit:
added USB connection info to reduce chance of infected drive impacting boot process or running a program as it starts
edit:
emphasize any anti-malware program should be up-to-date (both program and any associated definitions files)
edit:
highlighted that RKill will impact the registry. Of course, nasty malware screws with your registry too.
edit:
removed some duplicated sentences
edit 20110602:
added Microsoft Standalone System Sweeper to the list

PIRATE May 27, 2011, 11:39am EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Malware destroying my computer - urgent help needed
What you need to do is press F8 a few times before Windows loads, go into Safe Mode with networking, once you do that, open Internet Explorer, go into Connections settings and remove any proxy servers that the virus might be connecting to. (Wild guess here, but most malware nowadays do that).

Then download Avast free and after installing, schedule a boot scan, then restart and let computer boot normally.

What it will do, is before Windows starts, you will get a blue screen similar to the one when you install XP and the Antivirus will scan and delete any infected files before the Operating System starts.

Try this and what John suggested and let us know.

In an extreme case, you might have to reinstall your OS, I've seen XP installations never work properly after a terrible infection.

------------------------------------------------------------------------------------------------------------
Intel Core 2 6400 2.1ghz / ASUS SLI Deluxe / 4gb DDR2 800 G.Skill / ATi Radeon HD 3870 512mb OC / 7 years old Seagate Barracuda 160gb 7200
Meats_Of_Evil May 27, 2011, 12:03pm EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Malware destroying my computer - urgent help needed
Can't believe no one mentioned the super awesome Malwarebytes for his trouble:
http://www.techspot.com/downloads/4716-malwarebytes-anti-malware.html

-------------------------------------------------------------------------------------------------------------------------
Everything I write is Sarcasm.
PIRATE May 27, 2011, 07:37pm EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Malware destroying my computer - urgent help needed
Cant believe you didnt read his post where he says he used it already...

Coņo mano!

------------------------------------------------------------------------------------------------------------
Intel Core 2 6400 2.1ghz / ASUS SLI Deluxe / 4gb DDR2 800 G.Skill / ATi Radeon HD 3870 512mb OC / 7 years old Seagate Barracuda 160gb 7200
James Dean Aug 10, 2011, 08:17am EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Malware destroying my computer - urgent help needed
SUPERAntiSpyware Free Edition

SUPERAntiSpyware Free Edition excels at removing malware on your system. It takes around 30 minutes to fully scan. Please see below for instructions on how to use this very valuable program.
Download SUPERAntiSpyware Free Edition.17
Save the file to your desktop for easy access.
Double-click on the SUPERAntiSpyware.exe file to launch the installer.
Click Next.
Put a dot next to I Accept the License Agreement.
Click Next.
Type your name and click Next.
Click Next to leave the default installation path which is C:\Program Files\SUPERAntiSpyware.
Click Next to install SUPERAntiSpyware.
Please be patient as it installs to your system.
After it is done installing, click Finish.
Click Yes to the pop-up asking if you want to check for the latest definition updates.
Please be patient as it downloads the updates.
In the next pop-up window, click Next.
Click Next until you see the word Finish, and then click Finish.
Click on Protect Home Page (recommended).
When the main program control window comes up, click on Scan Your Computer.
Put a check next to Perform A Complete System Scan and click Next.
It will now scan your system for malware.
When SUPERAntiSpyware finishes, remove everything that is found.


Write a Reply >>


 

    
 
 

  Topic Tools 
 
RSS UpdatesRSS Updates
 

  Related Articles 
 
 

  Newsletter 
 
A weekly newsletter featuring an editorial and a roundup of the latest articles, news and other interesting topics.

Please enter your email address below and click Subscribe.