Help please - 800+ viruses!!! WTH...

RussJK · 15 June 2011 at 11:45AM

You didn't have 800 viruses

It's just a nasty way it alters system settings to make it so if you tried to run one program, it would actually cause you to run the 'virus' instead.

You did well to run Malwarebytes to fix it - you should count yourself lucky that the malware didn't alter the registry in the same way to prevent Malwarebytes running.

1. See if you can run system restore to a restore point before all this.
2. Save this file to the desktop http://www.trendmicro.com/ftp/products/hijackthis/beta/HijackThis.exe
Then hold LEFT SHIFT and RIGHT CLICK on it, then Run as Administrator (or current user in XP) and do a SYSTEM SCAN and then SAVE LOG. Don't Fix anything, just copy/paste the log that comes up in notepad like you did with Malwarebytes.
3. Run Temp File Cleaner and reboot the computer while we look at the Hijackthis log http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/

relic · 15 June 2011 at 11:48AM

Honestly, you can carry on "fixing" the problem with various programs, or go for the safer, easier and better option of doing a format and re-installing Windows.

Tia_Maria06 · 15 June 2011 at 11:52AM

deleted as its an old log

Tia_Maria06 · 15 June 2011 at 11:54AM

oops, I think I have done something wrong, I didnt see anything happen so I clicked the run file again and it said to repair, so I did!!

p.s sorry posted on wrong thread a min ago!!

RussJK · 15 June 2011 at 11:55AM

Tia_Maria06 wrote: »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:51:48, on 26/05/2010

It's an old log Tia. Run system restore first, then follow my post as above to make a new Hijackthis log.

Tia_Maria06 · 15 June 2011 at 11:57AM

relic wrote: »

Honestly, you can carry on "fixing" the problem with various programs, or go for the safer, easier and better option of doing a format and re-installing Windows.

hmm, I dont know how to do that and also I dont have any discs or whatever you need to re install windows?

Jeff_Bridges_hair · 15 June 2011 at 12:02PM

relic wrote: »

Honestly, you can carry on "fixing" the problem with various programs, or go for the safer, easier and better option of doing a format and re-installing Windows.

why do people keep saying this on here? Im not saying its wrong but its not easier at all and you may not even fix the problem as if they back up to an external HD with what they want to keep they may still have the rogue stuff in the files there.

The easiest solution is to try and fix it first with the tools available. And its really mainly the registry that has been changed here not an out and out supermentaltrojan virus.

relic · 15 June 2011 at 12:06PM

Jeff_Bridges_hair wrote: »

why do people keep saying this on here? Im not saying its wrong but its not easier at all and you may not even fix the problem as if they back up to an external HD with what they want to keep they may still have the rogue stuff in the files there.

The easiest solution is to try and fix it first with the tools available. And its really mainly the registry that has been changed here not an out and out supermentaltrojan virus.

It is easier, all you are doing (whatever anyone says) with all these programs is putting a patch on stuff, eventually everything will get infected again. Half the time people don't even realise this stuff is happening, after they have done all the malware scans and so on, then wonder why their bank account has been cleared two months later.

Windows takes what, 30 minutes to install?

Rather spend 30 minutes doing that, installing my programs again and have piece of mind than messing around "fixing" files.

CoolHotCold · 15 June 2011 at 12:09PM

I know most people say you can fix everything etc etc via tools.

But for me, at the first sign of infection I nuke & pave. Which is a destructive recovery. Yes you can remove just about anything if you put enough effort and time into it, but I like a secure system and I don't know what I got infected from, what else it's done to my system and what backdoors its opened on the system.

Thats Why I have everything stored on External HDDS & In The Cloud so I don't have to worry about formatting. Though I admit I haven't done this in a while (I Nuke & Pave every 18 months to clean up the system) because the Internet Security I use is great at detecting stuff (And you just have to know which sites are dodgy and which ones are boarderline)