Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Resolved HJT Threads

User Tag List

virus won't let me run anti virus software, hijacks my browser

This is a discussion on virus won't let me run anti virus software, hijacks my browser within the Resolved HJT Threads forums, part of the Tech Support Forum category. Out of nowhere I got the "blue screen of death" the other night. Wasn't even on the computer! But it


 
 
Thread Tools Search this Thread
Old 02-22-2010, 08:03 PM   #1
Guest
 
Join Date: Feb 2010
Posts: 1
OS:



Out of nowhere I got the "blue screen of death" the other night. Wasn't even on the computer! But it was on, so obviously whatever was activated was maybe time released? Or came in through a back door--computer is always online through wifi. Anyway...

Symptoms:

- Search results in any web browser get redirected to gambling sites, porn, credit check sites, malware sites, etc. I CAN type in an URL and it'll work fine, but any link off Google, yahoo, webcrawler, etc, goes to bad sites. So I can't search the web to even figure this situation out.

- I can't open or run any of my anti virus software, including Spybot, Norton, AVG, Combofix, superantispyware, etc. I CAN run Hijack this, however.

- web browsers will NOT log onto any sites where I can download virus software,. For instance, i had to have a friend download Combofix and throw it on a flash drive. But still on my comp it won't load. BUT my browsers will register these sites as either 404s or a lost connection, which is obviously false.

- Recurring popups of a Win32 error. Constant clicking noise while online, as if it's trying to open a link somwhere.

- System Restore has been hijacked and is unusable. I get an error message saying my system administrator has disabled my authorization, and I need to contact them (it's personal PC, I'm the only admin).

- CANNOT BOOT TO SAFE MODE, it just freezes

- I CAN boot to Safe Mode with Networking

- Have to restart three - four times before computer actually boots.

This is the actual computer i use at the office, so I'm kinda of up the creek until i get this squared away.Any help is greatly appreciated. Thank you.
JohnnyFuego is offline  
Sponsored Links
Advertisement
 
Old 02-23-2010, 11:07 AM   #2
TSF-Emeritus
 
Join Date: Jun 2006
Location: here & there and everywhere
Posts: 15,384
OS: XP Win7 Win 8.1 Ubuntu 10.10



Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:
Having problems with spyware and pop-ups? First Steps
link at the top of each page.

Please follow our pre-posting process outlined here:

https://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

==========

It's likely that the infection may prevent our tools from running. The following tool will help running them.

If you have an active internet connection, copy/paste the links below into your browser, don't click them or the rogue might redirect. If you don't have an active internet connection, download the tools from another machine, and transfer them to the affected machine via USB flash drive.


Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)

There are 4 different versions. If one of them won't run then download and try to run the other one. You only need to get one of them to run, not all of them.

Vista and Win7 users need to right click and choose Run as Admin

https://download.bleepingcomputer.com/grinler/rkill.exe
https://download.bleepingcomputer.com/grinler/rkill.com
https://download.bleepingcomputer.com/grinler/rkill.scr
https://download.bleepingcomputer.com/grinler/rkill.pif

Note: You will likely see a message from this rogue telling you the file is infected. Ignore the message. Leave the message OPEN, do not close the message. Run rkill repeatedly until it's able to do it's job. This may take a few tries. You'll be able to tell rkill has done it's job when your desktop (explorer.exe) cycles off and then on again.

At this point, you should now be able to run analysis tools.

Once the tool has run, do NOT reboot the machine, and then try once again to run DDS and GMER as instructed in our First Steps and post them in a new thread as this one shall be closed to put you back in the queue.

If for some reason the machine reboots, repeat the process. Again, try not to restart the machine.
amateur is offline  
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 03:05 AM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts