Please help - red biohazard desktop

ladyanissina · 07-04-2008, 12:19 PM

Hi everyone and thanks in advance for any help you might have. I'm familiar with computers, but I'm def not a pro.
My computer has been infected with a really nasty thing. It seems to have completely taken over my computer! I'll start at the beginning -
At first my husband wasn't able to access the internet so I told him to run spybot and adaware as well as Symantec. He did and they didn't catch anything. So he turned the computer off. When I got home and turned it back on, my wallpaper was a red screen with a biohazard symbol on it saying something about my privacy.I also could not access "my computer," "desktop properties," and a number of other functions. My "administrator" had apparently disabled that ability.
I have since tried to run SmitFraudFix (it will not run at all on the computer), SUPERAntispyware, McAffee, but to no avail. Symantec will no longer run. After running SUPERAntiSpyware, the extra icons are gone, but the rest of the problem remains. I have heard of trying Combofix, but I can't download it onto my computer. I was using a jump drive to transfer files from my husband's computer to mine, but now that drive is fried (no computer will read it).
I can't download the proper programs to obtain an HJT log or I would have posted one. I found the link, but can't access the internet on that computer to download it.
Does anyone have any suggestions? I really can't afford to just wipe the computer clean, I have a lot of valuable information on there.
Thank you,
Lady Anissina

ladyanissina · 07-05-2008, 12:42 PM

Bump for help.
I'm pretty desperate for help right now

ladyanissina · 07-06-2008, 07:38 PM

Bump?

tetonbob · 07-06-2008, 08:01 PM

Hi -

Not sure what you expect us to do.

With no logs, it's difficult to assess the situation. We don't generally work blind. In many such cases, it's best to just format and start over. Or take it to a local technician who has the resources to pull your existing drive out, slave it to a bench machine (without risk of infection to a normal usage machine), back up your valued data, and reinstall. Or, if you have the knowledge, do so yourself. Thing is, any machine you slave the drive to is somewhat open to infection. I have sacrificial bench machines for that purpose. If anything happens to them, it's no big loss, I format and reimage.

Suggest you give this a read:

http://miekiemoes.blogspot.com/2008/...draw-line.html

Have you tried formatting the USB stick so you can use it again?

This tool works on most brands of USB jump drives:

http://www.apacer.com/en/support/dow...r_v2.9.1.1.zip

Or purchase another one? They're not very expensive these days. I have several.

Do you have access to a CD-R on a clean machine? You might be able to download tools on a CLEAN MACHINE, and burn them to CD, carry them to your machine and run them. Start with Deckard's System Scanner:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.

Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.

To attach a file to a new post, simply

Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:
C:\Deckard\System Scanner\extra.txt
Click Upload.

What DSS will do:

create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

---------------------------------------------------------------------------------------------

tetonbob · 07-06-2008, 08:02 PM

Is this a different machine?

Internet Speed Monitor Pop Ups/Sloooow Computer

07-04-2008, 12:19 PM	#1 (permalink)
ladyanissina Registered User Join Date: Jul 2008 Posts: 4 OS: windows xp service pack 2	Please help - red biohazard desktop Hi everyone and thanks in advance for any help you might have. I'm familiar with computers, but I'm def not a pro. My computer has been infected with a really nasty thing. It seems to have completely taken over my computer! I'll start at the beginning - At first my husband wasn't able to access the internet so I told him to run spybot and adaware as well as Symantec. He did and they didn't catch anything. So he turned the computer off. When I got home and turned it back on, my wallpaper was a red screen with a biohazard symbol on it saying something about my privacy.I also could not access "my computer," "desktop properties," and a number of other functions. My "administrator" had apparently disabled that ability. I have since tried to run SmitFraudFix (it will not run at all on the computer), SUPERAntispyware, McAffee, but to no avail. Symantec will no longer run. After running SUPERAntiSpyware, the extra icons are gone, but the rest of the problem remains. I have heard of trying Combofix, but I can't download it onto my computer. I was using a jump drive to transfer files from my husband's computer to mine, but now that drive is fried (no computer will read it). I can't download the proper programs to obtain an HJT log or I would have posted one. I found the link, but can't access the internet on that computer to download it. Does anyone have any suggestions? I really can't afford to just wipe the computer clean, I have a lot of valuable information on there. Thank you, Lady Anissina

07-05-2008, 12:42 PM	#2 (permalink)
ladyanissina Registered User Join Date: Jul 2008 Posts: 4 OS: windows xp service pack 2	Re: Please help - red biohazard desktop Bump for help. I'm pretty desperate for help right now

07-06-2008, 07:38 PM	#3 (permalink)
ladyanissina Registered User Join Date: Jul 2008 Posts: 4 OS: windows xp service pack 2	Re: Please help - red biohazard desktop Bump?

07-06-2008, 08:01 PM	#4 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 24,584 OS: 2000 Pro; XP Pro; XP Home	Re: Please help - red biohazard desktop Hi - Not sure what you expect us to do. With no logs, it's difficult to assess the situation. We don't generally work blind. In many such cases, it's best to just format and start over. Or take it to a local technician who has the resources to pull your existing drive out, slave it to a bench machine (without risk of infection to a normal usage machine), back up your valued data, and reinstall. Or, if you have the knowledge, do so yourself. Thing is, any machine you slave the drive to is somewhat open to infection. I have sacrificial bench machines for that purpose. If anything happens to them, it's no big loss, I format and reimage. Suggest you give this a read: http://miekiemoes.blogspot.com/2008/...draw-line.html Have you tried formatting the USB stick so you can use it again? This tool works on most brands of USB jump drives: http://www.apacer.com/en/support/dow...r_v2.9.1.1.zip Or purchase another one? They're not very expensive these days. I have several. Do you have access to a CD-R on a clean machine? You might be able to download tools on a CLEAN MACHINE, and burn them to CD, carry them to your machine and run them. Start with Deckard's System Scanner: Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges. Close all applications and windows. Double-click on dss.exe to run it, and follow the prompts. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here. Please attach extra.txt to your post. To attach a file to a new post, simply Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and copy and paste the following into the "Upload File from your Computer" box: C:\Deckard\System Scanner\extra.txt Click Upload. What DSS will do: create a new System Restore point in Windows XP and Vista. clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives. check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed. --------------------------------------------------------------------------------------------- __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Our help is voluntary, but this site needs donations to operate. Please consider Donating to the Forum. Please do not ask for help via Private Message. Ask in the forums, so all may gain from the experience.

07-06-2008, 08:02 PM	#5 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 24,584 OS: 2000 Pro; XP Pro; XP Home	Re: Please help - red biohazard desktop Is this a different machine? Internet Speed Monitor Pop Ups/Sloooow Computer __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Our help is voluntary, but this site needs donations to operate. Please consider Donating to the Forum. Please do not ask for help via Private Message. Ask in the forums, so all may gain from the experience.