Wednesday 21 September 2011

"Virus Program" has taken over my computer?

For the last few days I've been having a major virus related issue. I have AVG and Ad-Aware which run constantly in the background, and I also have Malwarebytes' Anti-Malware which I have never really used before until now. I use a wireless internet connecting through my computer to my University's wireless network.



My problem is that now whenever I have my computer on, a few minutes after I start it up I get messages from an %26quot;antivirus%26quot; program that I do not have, telling me that windows has detected a security threat, that my computer is infected and saying %26quot;click here for the scan you computer%26quot; (certainly a very trustworthy program). I always close the bubble but then I get bombarded with messages that specific files are infected. Usually it says %26quot;Application cannot be executed. The file wuauclt.exe is infected. Do you want to activate your antivirus software now?%26quot; I don't know what wuaclt is. Whenever I try to open a program -- any program at all, whether it be itunes or just my program manager, the message changes specific to whatever I'm trying to open: %26quot;the file itunes.exe is infected%26quot; or whatever, and usually the program does not open. These messages come from my taskbar where there is a little blue shield icon with a white stripe. I have tried right-clicking on this icon to close it like I would do with any %26quot;normal%26quot; application in the taskbar, and when I do it pulls up a %26quot;virus scan%26quot; window for %26quot;Antivirus Live%26quot; with 34 infections found -- always the same things. It often, but not always, will also open a window in the main screen of my computer giving me the same message and playing that distinctive %26quot;windows error%26quot; sound. After a while, it will automatically open an IE browser window (I use Firefox) asking me to buy this %26quot;Antivirus Live%26quot; program for $50 to $70. I closed this window a few minutes ago and it automatically opened another IE window with a porn site -- very classy when I%26quot;m working the front desk of my building. It will also open the Windows Security Center automatically, but I don't think it's the real security center because it says that I do not have anti-virus protection when in fact I do.



The first few times this happened, it would either go away on its own after a few minutes, or I could restart my computer and it would work properly on restart. Since my antivirus/antispyware programs weren't finding anything significant I didn't worry too much, and there was a full day of no problems at all. Now, however, the problem seems worse than ever, and I can't even really use my computer. As a college student this is a major problem for me.



AVG has found a few trojans and quite a few tracking cookies, but removing them has not taken care of the problem. The anti-spyware and anti-malware have not found anything. I just downloaded and installed avast, which I used to have a while ago and I prefer over AVG, and I'm currently running a scan but it hasn't found anything yet. I don't know what is going on but it's driving me crazy and I would like any help available to try and fix it.
%26quot;Virus Program%26quot; has taken over my computer?
Antivirus Live is already in full gear, and it is EXACTLY your problem.



*DO NOT WIPE YOUR COMPUTER, DO NOT RE-INSTALL YOUR OS, DO NOT REFORMAT*! That %26quot;advice%26quot; is thrown around here in a sad, reckless fashion.



The real fix is time consuming but not nearly to the effect of nuking your computer and replacing the files. It's all right here---I suggest you print the page and check-mark the steps completed as you go:



http://www.bleepingcomputer.com/virus-re鈥?/a>
%26quot;Virus Program%26quot; has taken over my computer?
Hi - Does it look anything like this?
Hi Shannon, sorry I don't have an answer for you but you have told exactly the same story as mine, even down to the porn site popping up. I will watch this space for a good answer. Good luck
Download and install SPYBOT. you can download it for free from www.downloads.com Very easy to use software and works flawlessly.
is your firewall on?
i didn't read any of that, but if you have too many viruses and you cant get rid of them, email/save onto a permanent disk all you files that you need. wip your hard drive. i had to do that when i had more than 15 viruses and really bad things on my computer. it works and you can get back ur stuff. i emailed my pictures and docs to myself and that's how i got them back.
DO NOT TURN YOUR PC OFF OR USE SYSTEM RESTORE! The key to this infection is getting rid of it fast. The longer it remains on your system the more it disables and prevents removal The first thing not to do is click on the X to exit the program or pop-ups if and when they appear. This will only multiply the infection. . Press Alt + F4 to exit the pop-ups. . Next, control panel %26gt; internet options %26gt; connections %26gt; LAN Settings. Make sure the box for use proxie servers is unchecked and that auto detect settings is checked. This should restore your ability to access the net. Next, click on the first link below and choose save. Save the file to your desktop for convenience. Click on the icon and let rkill run. Rkill is not a scanner. It will not scan your computer. Most people think they are unable to download rkill bcoz of it's characteristics. When you click ro run rkill a black screen will appear similar to that of command prompt. It will say scanning to end the process for known malware. The screen will suddenly disappear. This is where people get confused. You do no receive a warning or any other message of what process has been stopped. Nevertheless, when the window for rkill disappears you are ready to download, update and scan with Malwarebytes. If you already have Malwarebytes on your computer at the time you became infected you will probably need to uninstall it and re-install. This is due to the files being corrupted by the infection on your computer. However, when uninstalling you will be prompted to re-start your computer. DO NOT DO THIS. Simply re-instlall. If you re-start your computer the process for the malware will start-up and you will have to run rkill again and even possibly remove and re-install Malwarebytes again as well. Update and choose quick scan of MBAM. Next, download Hijack This from the third link below and choose %26quot;Do a system scan and save log file%26quot;. Once the scan is complete the log file will open. Copy and paste the results into the text box of the fourth link below (although the main menu window offers you to upload the file log it is much faster to copy and paste). After pasting, click analyze and wait for the results to display. Scroll down the list to find all entries with a red x next to them. Locate those entries in the Hijack This main window and place check marks in the respective boxes. After all invalid entries have been marked click on %26quot;fix selected%26quot;. If you need further assistance you can email me from my Yahoo Answers profile page. Good luck!!



http://download.bleepingcomputer.com/gri鈥?/a>

http://www.malwarebytes.org/

http://download.cnet.com/Trend-Micro-Hij鈥?/a>

http://www.hijackthis.de/
You obviously have alot of Spyware and viruses. Try Downloading spybot search and destroy or Superantispyware... Both these programs are free and get the job done:

http://www.superadblocker.org/

http://www.safer-networking.org/



And remove Malwarebytes. It does nothing but sit at your computer and Choose not to detect Malware until you buy the Pro version.

For an Antivirus i reccomend Norton internet security 2010:

http://www.symantec.com/

It costs about $70 but it's worth it!

- Tamdas!
  • parameter
  • programming
  •