Red circle with white X

By bkhoban
Nov 30, 2009
  1. This is my first post so if i did somethin wrong I'm sorry. I read a similiar thread with same problem but I could not fix it. I've gotten this before but now i can't seem to remove it. It won't let me open my task manager even in safe mode. I can't even open firefox or anything else without being in safe mode. I have a Hijack this log. My computer has been infected for awhile now and it may be beyond repair.
  2. thinktech

    thinktech TS Rookie

    sounds like you will need to reinstall your os
  3. AnonymousSurfer

    AnonymousSurfer TS Guru Posts: 451   +37

    Please read 8 steps Removal and download Malwarebyte's, and SUPERAntiSpyware and post the scans. Then we can get a full look at your computer.
  4. AnonymousSurfer

    AnonymousSurfer TS Guru Posts: 451   +37

    Please open HijackThis and click on System Scan Only. Then check the following off.
    • C:\WINDOWS\system32\winupdate86.exe
    • R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    • F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon86.exe
    • O1 - Hosts:
    • O1 - Hosts:
    • O1 - Hosts:
    • O4 - HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe
    • O4 - HKUS\S-1-5-18\..\Run: [wow64main.exe] C:\WINDOWS\TEMP\wow64main.exe (User 'SYSTEM')
    • O4 - HKUS\S-1-5-18\..\Run: [calc] rundll32.exe C:\WINDOWS\system32\config\SYSTEM~1\ntuser.dll,_IWMPEvents@0 (User 'SYSTEM')
    • O4 - HKUS\S-1-5-18\..\Run: [WAB] C:\Documents and Settings\Owner.BRANDON\Application Data\Macromedia\Common\18eb805c19.exe (User 'SYSTEM')

    When you have checked that off, please click on Fix Checked.

    Then, re-load HijackThis and click Do a System Scan and Save a logfile. Then post the log to make sure they were deleted.
  5. bkhoban

    bkhoban TS Rookie Topic Starter

    Ok here is the log after i "Fix Checked"

    Also I have Malwarebytes but when I try to open it just doesnt do anything at all. Ive removed and downloaded again about 4 times now and still nothing.
  6. bkhoban

    bkhoban TS Rookie Topic Starter

    I was just watching the red circle and it just disappeared. I dont doubt it will come back after restart thought so I'll just wait for a response.
  7. bkhoban

    bkhoban TS Rookie Topic Starter

    I ran an Avira scan and saved it but somehow its not where i saved it and computer can't find it. Anyway I restarted after the scan and the red circle is gone but my desktop is still saying "Your system is infected!" "System has been stopped due to a serious malfunction. Spyware activity has been detected. It is recommended to use a spyware removal tool to prevent data loss. Do not use the computer before all spyware removed. Says that in a black box while the rest of the desktop is green. I'm going to run another Avira scan and post up report since I cant use Malwarebytes or SuperAntiSpyware.
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...