Peculiar Problem with PC!!!!

[srinathtk]

Hi Friends,

Recently I was browsing the Net for some Pocket PC application downloads. Generally I am a careful person and choosy about installing the apps from unknown source. But unfortunately, I got a mobile phone call and I was talking and browsing. I just clicked some link and it downloaded some exe file. Without thinking any thing, I double clicked to install and MY PROBLEMS started from that moment.

After this incident,following are the problems.
1.Every 5 minutes, my browser automatically opens and shows some message to download some 'Spy ware removal tool'. This message is coming very frequently.

2. I am not allowed to open few sites like 'Rediffmail' .

3.I get some pop up messages to install some 'Tool' for Protection etc.

I downloaded 'windows-kb890830-v2.1.exe' (Malicious Software Removal Tool)from Microsoft website and tried running. But this is also not working.

I downloaded 'Spybot- Find and Destroy', it is also not getting installed as it is checking some website to download some updates even though I am connected to internet.

Can any one help me please.

Thanks in advance.

Regards,

Srinath
India

[1life2live4]

When I hear things like this the first thing that comes to mind is window LiveOneCare. You can start a free trial for 30 days after that is $50.00 Works great. What you have is Ad-Ware boxes that prompt you to rather purchase something or make you think you need something.

good luck

[rjfvillarosa]

Srinath I moved your thread to Securities as this is a virus problem.

You have become the victim of one of the numerous bogus spyware program sites. The only spyware you have is that annoying popup.
One of the best antimalware applications out there at the moment is Malwarebytes.
You can download it for free here:
www.malwarebytes.org

Try downloading Malwarebytes to another computer, slaving your harddrive to that computer and scanning your harddrive as a slave.

[srinathtk]

Thanks rjfvillarosa,

I downloaded this tool and installed on my system.
I run the tool 'Malwarebytes Anti malware' and found that about 31 files are affected.
But I did not understand how to get out of the Problem/get a cure for this.

Can you kindly advice me how to go about this?

Thanks in advance,

Regards,

Srinath
India

[glc]

It's just like any other malware scanner. You tell it to fix/remove the infections.

[Negeva]

When you use Malwarebytes it allows you to create a log file, please do so and post/attach it here. You might also wish to read this: http://forum.pcmech.com/showthread.php?t=103171 and post a HJT log too, so we can make sure your machine is clean.

[srinathtk]

Dear Friends,

Thanks for all your suggestions.
I have done the following.

1. Downloaded the Hijack This tool , installed and run the Scan tool.
2. After running I selected all the files identified by the Tool to clean- Delete the file /Repair option.
3. The system rebooted after completing this operation.
4. Even after several attempts of the Tool running and rebooting, I am still left with few files.
5. I was running Avast Antivirus software. I stopped the Avast services and run the tool but still some files are still exist. (I stopped Avast service as I noticed all these files are from Avast application).

Earlier before running this tool, I was getting lot of POP UPs by opening a new Web page etc. And also the Browsers were not allowed to browse few sites.

NOW, after running and cleaning with Hijack Tool, I am NOT ABLE TO BROWSE AT ALL. I am not able to open any Website. BUT THE POP UPS HAVE STOPPED.
I am not able to Un install Avast Antivirus application.

I am attaching the the Log file created by Hijack tool. Kindly advice me what is the next action I need to take to clear the Spyware.

Thanks in Advance

With Warm regards,

Srinath
India

[Devastator]

Hi theres no easy way to soften the blow on this but your not meant to check all boxes and just click fix checked. Bad idea, we only asked for you to post up a log not delete the majority of your PC! I really wouldn't know where to go from here except nuke and pave.

It does look like you still have a running system but what is working and what is not is a mystery to me.

[mikeL]

Have you tried a system restore from before you installed Hijack this. then reinstall HJT and run the scan but don't delete anyting yet

[Negeva]

HJT allows for backups - hopefully you created them before doing anything. If so, do the following;


If you check "make backups before fixing an items", a backup will be created for any fixed objects or parts. This would be useful, should you mistakenly deleted important objects. You can restore it back.

If you're in the main menu select "None of above, just start the program". To restore an item, simply go to click on Config button > Backups. You can view list of deleted items. Check any that necessary and select restore.

Or, you can always try the System Restore approach someone suggested.

[srinathtk]

Hi Friends,

Thanks for all that support and feedback.

I have tried System restore option as suggested by mikeL but unfortunately, it was restored to the same status as it is now. Even though it showed the Restoration point as 13.8.2008, the status of the System was same.

I did not check the Backup option in HJT. In fact while running this tool, there was no propmt to back up. So I don't think I have backed up.

Now with this situation, can any one advice me what to do next.
I am mentally ready for a fresh Windows Install.

Kindly advice me my next steps.

Thanks in advance
Regards,

Srinath
India

[glc]

A fresh install is always the best way to recover from a malware attack.

[Negeva]

If you're upto the task of re-installing XP then do so. But, see what settings/data you can backup first.

[srinathtk]

Thanks for the Help,

I am able to take back up of all the Data needed.

I will install fresh XP on the system.

Any case installing is another project. I will post my next set of problems in other heading.

Thanks for all the support.

Regards,

Srinath