Infected with "BlowMeOFF" virus? worm?

[dstuffle]

My personal computer has been taken over by something called "BlowMeOFF". It's the only thing running on it. Using 100% capacity. 87-89% of memory. Can't remove or stop it running. I've had Malware installed for a while - maybe a year. Recently saw an uptick in blocked items. I can't do anything on that machine. I'm writing this from my work computer. Help!

 

I entered this in the forum half an hour or do ago, but now I don't see it in the forum. Sorry if this ends up as a duplicate.

 

Debbie

 

 

[MrCharlie]

Welcome to the forum, what's the operating system??

MrC

[dstuffle]

Thanks for the reply. Windows 7 operating sytem is in use.

[MrCharlie]

Please do this:

• Please download Farbar Recovery Scan Tool and save it to a flash drive.

  Please make sure you click download buttons that look like this, not "sponsored ad links":

  

  Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  Plug the flash drive into the infected PC.

• If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.

  If you are using Vista or Windows 7 enter System Recovery Options.

  To enter System Recovery Options from the Advanced Boot Options:

  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
  Note: In case you can not enter System Recovery Options by using F8 method, you can use Windows installation disc, or make a repair disc. Any Windows installation disc or a repair disc made on another computer can be used.

  To make a repair disk on Windows 7 consult: http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

  To enter System Recovery Options by using Windows installation disc:

  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
• On the System Recovery Options menu you will get the following options:

  • • Startup Repair

      System Restore

      Windows Complete PC Restore

      Windows Memory Diagnostic Tool

      Command Prompt

      Select Command Prompt

      Once in the Command Prompt:

  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter

    Note: Replace letter e with the drive letter of your flash drive.

  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

MrC

[dstuffle]

I downloaded the repair file and tried to use it. However, when I enter e:\frst64 (or e:\frst) in the command prompt window I get a message that the command is not recognized. I tried the command on the same line that came up when the command window opened (X:\windowssystem32>) and I tried switching to e: drive first. I can get a directory of the thumb drive and I see the exe file.

 

Any idea what I'm doing wrong?

 

It's been too long since I used commands. I tried the executable file name with and without run and a space in front of it and got nowhere.

 

Help!

[MrCharlie]

Are you using the correct version of FRST and it's on the flash drive?

Are you entering the correct letter of the flash drive?

Can you get someone to help you, sometimes another pair of eyes is helpful.

MrC

[MrCharlie]

How are we doing??

Do you still need help or can I close this post??

MrC

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!