Holy fucking malware... HELP PLEASE!!!

[JGood]

Got some malware bundled with some other software this morning I guess.

Here's the symptoms:

Black background that says "Warning! Spyware threat has been detected on your PC"

Constant pop-ups, including some from the quick launch bar that are Windows Security clones.

Unable to CTRL-ALT-DEL, it brings an error saying "Task Manager has been disabled by your administrator."

Unable to open anything with IE, does redirects to virus protection shit

Most .exe programs won't open, such as Firefox and ANY malware cleaning utilities I've transferred to the computer via my home network. I'm posting this from my laptop since I can't do a damn thing on that fucking piece of shit.

Booted in safe mode, cleared out unneeded shit via Add/Remove programs (going off the majorgeeks.com master malware list). Will boot in safe mode, but I still get the pop-ups.

I'm not a violent person, but if I came face to face with the fucker that wrote this shit, I would hit him til he couldn't move anymore. Fuck I'm pissed.

[DCColegrove]

God I hate that shit...

I have had to format and reprogram more than once because of the same kind of thing.

[TDE30]

I'm not a violent person, but if I came face to face with the fucker that wrote this shit, I would hit him til he couldn't move anymore. Fuck I'm pissed.

ROFL.

That sounds like the Vundo virus, I recommend running the following program (don't worry, it's safe and legit.) It may fix your problem, I had similar issues and this solved them.

http://en.wikipedia.org/wiki/VundoFix

Best,

[Hallen]

An interesting thing about Windows that I found out through a similar incident with my son's computer, is that .exe file extensions are not protected or special in the OS. You can redirect the OS to open a .exe file with a program or remove it from the known files list altogether. Then, any time you try to run anything, it just pops open the "what program do you want to use list". It is very annoying and a pretty big flaw in the OS.

Good luck. It is very frustrating and maddening experience. It is amazing that there are so many idiots in the world who spend their days making this stuff. What a waste.

The best advice is to stay away from those hacks and cracks websites because 90% of the time, that is where this stuff comes from.

[JGood]

Thanks, I'm running VundoFix now. I found a Task Manager restoration program, and that works (for now?). So i found a few process that don't belong, and ended the process tree (ending the process would end it, but it would come right back).

I'm just trying to get to the point where I can run the .exe programs. Still no luck.

Good luck. It is very frustrating and maddening experience. It is amazing that there are so many idiots in the world who spend their days making this stuff. What a waste.

My website got hacked a few weeks ago. I was mad, but I let it go. Now I'm fucking pissed. If I ever met anyone who admitted they do this shit, I don't know if I could physically control myself. They hide behind the defenses of their keyboard thinking they vandalize whatever the fuck they want. I have a wake up call waiting for them, in the form of a 10lb sledge to the dome piece.

Fuck I'm still pissed.

[metalix1021]

You might just have to go registry diving....not so fun.

I feel for you....

[TDE30]

If you know what to look for, cleaning the Registry can be very, very beneficial. For instance, I use IE7, so any traces of Netscape or Mozilla (that come on the OS from the factory) I delete. Do some Googling once your computer starts functioning normally, and find out which registry keys to delete.

[JGood]

Fuck. Vundo brought up nothing. I've done several reboots, here is the only problems that remain:

Cannot open firefox (did a uninstall/install, no change), or several other .exe programs, but can open some .exe programs

When using IE, if I click a link, it opens an ad page. If you think about it, this makes it virtually unuseable.

My task manager has restored, but it shows 2 known bad processes, 27304.exe and 444.470



My background is back to normal, and my IE homepage stays as I set it. No more pop ups for the most part. Every now and then, I get a box asking me to put in a code to verify my computer is legit (malware obviously).

[TDE30]

I'd say just clean the registry, get rid of any and ALL unnecessary programs (Viewpoint being one of them,) and keep an eye on the Task Manager and make sure you know what each program is and what it does. Run AdAware, SpyBot SD, etc. Then, run the program 'MSCONFIG' go to 'Startup' and only check programs that you need at startup.

I do some IT work on the side, and this is pretty much what I do to my client's computers. I'm no expert in the subject, but I'd say I know a bit about it. If none of those procedures work, save all of your documents to a flash drive and reload the OS.

[jhower08]

Sounds like exactly what happened to my computer a few months ago. I tried to run some anti-malware programs and it got rid of a TON of files. I just kept running the scanner and deleting them as they were found. Then all of a sudden, my computer wouldnt even boot. Thats why Im currently using an AWESOME 20gb hard drive. I guess Im just afraid to admit that I have to reformat that hard drive :(

Good luck dude...

[325_e30]

just goto download.com and get spybot search and distroy, and or adaware. and run those and theyll kill most of the spyware shit in your comp. and if you dont have a anti virus you can goto avg.com and dl the free antivirus there and run that shit and itll clean the rest..thats what i did and do to keep my shit clean..cuz lord knows i goto many questionable sites lol

[abepark]

system restore points are your friends! just restore from a good known point in time.

[jhower08]

system restore points are your friends! just restore from a good known point in time.

This is true.

Unfortunately, most malware viruses destroy your restore points or so I hear...

[VacMan]

Go grab hijack this and find one of the tech sites to post a log to. They'll look at the log and tell you what to kill. Or you can be brave and kill it all yourself.

Tim

[MoparJ]

keep an eye on the Task Manager and make sure you know what each program is and what it does. Run AdAware, SpyBot SD, etc. Then, run the program 'MSCONFIG' go to 'Startup' and only check programs that you need at startup.

This is what I do; although problems like this rarely ever happen to me these days. MSCONFIG is an great tool that few people know about...

Zonealarm + AVG + Spybot = awesome protection for no cost.