Something preventing installation and running of anti spyware programs

[quantum123]

My firefox's been hijacked, everytime I click on a link in google it redirects me to somewhere else. Before it happened my computer was forced a restart and when I log back onto my window, I wasn't able to run spybot search and destroy, mini sandbox appear next to my arrow and then it wont load (it shows up in tesk manager processes but with mem usage of only 3,550k)

AVG did remove several trojans but that doesn't seem to solve the problem. I downloaded malwarebytes, spyware doctors, hijackthis but installer either give me an error or won't show up at all when i execute the installation files.

It also seems that my pc security center has been disabled as well, when i opened up windows security center there was a message at the top "The security center is currently unavailable because the "Security center" service has not started or was stopped. Please close this window, restart the computer (or start the security center service), and then open the security center again.

I also tried safe mode to run/install anti spyware programs but to no avail. Please help :/

 

[quantum123]

update, I was able to install Ad-aware free edition and run a quick scan in safe mode. It removed "win32.trojan.tdss". After rebooting, spybot search and destroy was working again suddenly, now running a full scan with it. Browser redirect thing is still there and hijackthis/malwarebytes installers still give me error. Will update.

 

[Fakarwi]

I have a similar problem. I have Avg but it will not update. If I try to go to any antivirus software or online analyser ites it get an IE error. I have deleted b.exe, 1.exe, 0. exe, reader_s.exe, but something else is generating them. the other night my computer was on and it suddenly started streaming sound from a porn site, but there were no open I.E windows. as soon as i shut the B.exe process down from task manager, it stopped. My ativirus and adaware keep finding a heap of stuff, but when I search for the files they are not there. Is the best solution to throw my computer in the bin and get a new one?

 

[quantum123]

I have a similar problem. I have Avg but it will not update. If I try to go to any antivirus software or online analyser ites it get an IE error. I have deleted b.exe, 1.exe, 0. exe, reader_s.exe, but something else is generating them. the other night my computer was on and it suddenly started streaming sound from a porn site, but there were no open I.E windows. as soon as i shut the B.exe process down from task manager, it stopped. My ativirus and adaware keep finding a heap of stuff, but when I search for the files they are not there. Is the best solution to throw my computer in the bin and get a new one?

I'm noticing b.exe as well and the exat same problem that you had, random radio playing in the background last night. I deleted it, terminated it using tesk manager but it keeps popping up. So far, here are the results from current scan (not even half way through yet):

**tp://i131.photobucket.com/albums/p296/deltaxxmintpie/virus-1.jpg
**tp://i131.photobucket.com/albums/p296/deltaxxmintpie/virus2-3.jpg

(I need 5 post counts or more to be able to insert links so put "ht" instead of "**" )

I'm no pc expert but if you wana try following what I did: download and install AVG free edition and ad-aware free editions. Run scan with those in safe mode. Reboot and download install spybot search and destroy, update to latest data base then run a full system scan with it I'll update again after full scan is finished.

 

[jyanich]

I have experienced the same thing.
Think I picked it up while surfing the net with mozilla firefox.

I was running AVG 8.5... the tray icon shows the program working, but AVG is no longer functional.
I deleted, uninstalled and re-installed AVG 9... again the program on the surface appears to be installed, but it is not actually scanning.

I have tried hijackthis to see if I could discover the responsible file, but it freezes and uninstalls hijackthis before it can complete a scan.

It also deactivates and uninstalls NOD32, lavasoft ad-aware, spybot S&D, webroot...etc. I have not found a single spyware or antivirus that can stay active and installed and catch this thing.

I did find a b.exe that was suspicious and have deleted it, but I know there is still a trojan or something controlling my PC.

I get pop-ups in IExplorer for something like poprocks...it is advertisements for music sites...

please let me know if anyone finds a workable solution!

I even gave up at one point and tried to use my Windows XP disk to reboot and reformat entire drive to start over... this process/trojan can even cause the windows XP boot disk to crash and prevents me from deleting it by deleting the entire drive...very tenacious virus!!

 

[jyanich]

IOrbit Security 360 found:
Spyware.Win32/Dropper - Quarantined, File, C:\WINDOWS\win32k.sys, 4-23080

I have deleted the B.exe as well manually, but I am still experiencing problems.
Despite being the only user and admin on my machine... things like hijackthis get uninstalled or the shortcut no longer points to the .exe then I am told that I "may not have the administrative rights to access the file"

 

[Bobbye]

Not good to compare notes on malware! "I have the same thing" doesn't work here!

For help, go through the steps: https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/

Leave logs for review.

DON'T compare notes!

 

[jyanich]

Not good to compare notes on malware! "I have the same thing" doesn't work here!

For help, go through the steps: https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/

Leave logs for review.

DON'T compare notes!

I can get to step 4... then when i try to run the quick scan with anti-malware... as soon as the scan starts, the program disappears...it gets shut down.
I checked for a log file to see if I can figure out what it is doing when it is shut down, but no logs are ever saved.
then I get this error when I try to restart the program:

NOW WHAT????

 

[Bobbye]

Please run this check:

• Make sure to use Internet Explorer for this
• Please go to VirSCAN.org FREE on-line scan service
• Copy and paste the following file path into the "Suspicious files to scan" box on the top of the page:
  • c:\windows\system32\userinit.exe
• Click on the Upload button
• If a pop-up appears saying the file has been scanned already, please select the ReScan button.
• Once the Scan is completed, click on the "Copy to Clipboard" button. This will copy the link of the report into the Clipboard.
• Paste the contents of the Clipboard in your next reply.

Also scan these,

C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe


Include the report in your next reply.

 

[jyanich]

I cannot re-install microsoft internet explorer...
I have tried multiple times... it acts like it installed and at the end of the install it states I must shut down and restart.
On restart, the icon for internet explorer is there and the folder containing the files are there, but the program does not run.

 

[jyanich]

Choose updates to install (Internet Explorer 8)
http://i35.tinypic.com/zqzgn.jpg

Installing Internet Explorer 8 (Fails)
http://i37.tinypic.com/28tuph0.jpg

Some Updates could not be installed
http://i35.tinypic.com/v79xsk.jpg

this is what happens as it tries to install.... it cant scan for malicious programs, so it wont install internet explorer.

my explorer was fine and untouched by this "virus" until I tried to use it to do an online scan like you suggested.

then once it was seen as a threat, the virus disabled/uninstalled it.