Google links are being redirected to random ad sights or obscure search engines. b.exe published by "popcap" keeps popping up in Spybot and is running in the task manager. Malwarebytes will install and start to run but is then stopped and will not run until it is renamed and the security settings are reset on the mbam.exe file. It will then run for a few seconds and then close and disable. I have tried renaming and changing the extension. I have tried DDS scan and Rootrepeal and the same thin happens with them. My AV was disabled when I attempted to run the programs. I was able to run Super Antispyware which found some trojans and fixed the pop up add windows that were popping up when IE was closed. After the initial scan, Super Antispyware cannot be opened. I tried to run Malwarebytes in safe mode, but it was stopped.
Google links redirected, b.exe, Malware programs do not run
- Thread starter howmuch
- Start date
- Status
Jawshh
Posts: 388 +1
IMO he should try combofix first.
My antivirus will run but does not detect anything. I am running McAfee. Should I try running a different antivirus? HJT will run for a few seconds and then is shut down. Then it will not open unless I go into program files and change the security permissions. The malware changes the security permissions to "everyone".
Jawshh
Posts: 388 +1
Ok. First run http://www.kaspersky.com/virusscanner if you cant the follow:
Boot into safe mode and run malwarebytes,superantispyware and mcafee. then type "msconfig" without quotes in run box. Uncheck "load startup items"(check Attachment) and then reboot to normal mode and try HJT.
Boot into safe mode and run malwarebytes,superantispyware and mcafee. then type "msconfig" without quotes in run box. Uncheck "load startup items"(check Attachment) and then reboot to normal mode and try HJT.
almcneil
Posts: 1,236 +1
No dice. It still shuts down HJT. Kapersky did not find anything.
almcneil
Posts: 1,236 +1
You wrote initially you couldnot get Malwarebytes or SuperAntipsyware to run in Normal Mode. Have you tried them in Safe Mode? If not, try them next. if you have, we're running out of options. Looks like you might have to re-install Windows.
Repost with results or answers please.
-- Andy
Repost with results or answers please.
-- Andy
almcneil
Posts: 1,236 +1
Sorry howmuch, but at this point I'm recommending you re-install Windows. It's guaranteed to work and we can do without reformatting so your personal files will not be touched. But you will need to re-install device drivers and programs.
Repost if you want to try this.
-- Andy
Repost if you want to try this.
-- Andy
almcneil
Posts: 1,236 +1
For the most part, yes, it will get rid of the malware. When you re-install Windows, you get a new registry. If the programs are not in the registery, they cannot run (with one exception) Now there is one type of spyware I have encounter that is "sneaky" as it hides in your personal files and re-installs when you go restore your personal files from backup. But by far the majority are not like that. Simply re-installing Windows wipes them out.
The real downside to re-installing Windows is you are then forced to re-install all yhour programs and some device drivers. So you need to find all your installation CDs and/or download installation programs from the Internet all over again.
-- Andy
The real downside to re-installing Windows is you are then forced to re-install all yhour programs and some device drivers. So you need to find all your installation CDs and/or download installation programs from the Internet all over again.
-- Andy
Jawshh
Posts: 388 +1
Or you can just repair install and when it first boots, hit it with everything you got. If you are going to do that, make sure you download and save all the malware equipment you'll need. Download this pack http://hotfile.com/dl/13644011/5fc0633/12_Must_Have.rar.html
Jawshh
Posts: 388 +1
But before everything else, You might wanna try https://www.techspot.com/downloads/5587-combofix.html . Save it to your desktop and rename combofix.exe to conbo-fix.exe. Then run it.
Jawshh
Posts: 388 +1
- Status
Similar threads
