Jump to content

Recommended Posts

I hope this is the correct forum, and I can finally receive some help with this.

A little back-story here. A few days ago, out of nowhere it seems, this window popped up called "System Tool 2011", and ran like anti-virus program. I stopped it, which then triggered my desktop changing to this text, no programs opening, only pop-ups claiming the selected files were infected etc.

So, I rebooted into Safe Mode with Networking, downloaded Malwarebytes, rebooted into Normal mode, and ran the program as soon as it came up, before all those pop-ups came on. Oh, I did update Malwarebytes as well.

Well, I ran the program, and it worked like a charm. It found the System Tool file, along with a couple of others, Quarantined it, and deleted it. I went looking for the files I read online to look for in the Registry but, they were not to be found.

So, great it worked. Well, yesterday it happened again at around 2:30pm EST>. I did exactly what I did the day before, and it found the file, and deleted it etc. Everything was fine until...alas...it happened again today at 2:12pm.

So, I'm at my wits-end here. Obviously, it's still somewhere on the PC, and seems to execute around the same time in the afternoon. I read on here about a file called combofix.exe, and about renaming it to combo-fix.exe. That to run it, you have to disable any anti-virus, Spybot etc. I tried to Disable AVG 8.5 as instructed but, when I went to run combo-fix.exe, it could not run, saying I had to uninstall AVG. When I tried to uninstall AVG, it will not allow me....grrrr.

So, I desperately need assistance in getting this System Tool 2011 gone for good. My info on the PC is as follows:

Windows XP Professional (Version 2002).... SP3

AMD Athlon, Dual core 2.21 GHz

1.50 gigs of RAM

Downloaded and updated Malwarebytes

Have AVG 8.5 Anti-virus and updated

Have Spybot Search and Destroy

Browsing Internet using Mozilla FireFox

Currently online using Safe Mode with Networking.

Thank you for ANY help I can get.

Vinnie

Link to post
Share on other sites

Welcome To Malwarebytes :)

I'd be glad to point you in the right direction :P

WARNING ABOUT COMBOFIX:

Combofix is a powerful tool and should only be used by or under the supervision of someone trained in its proper use

We don't work on Malware removal in the general forums

some infections are a pain to get rid of and require some "special tactics" Lets Have An Expert Check It Out .

please follow All the instructions below and an Expert will assist you

  • Please print out, read and follow the directions here, skipping any steps you are unable to complete.
  • Then post a NEW topic here.
    One of the Expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic

and choose one of the Email options so that you're alerted when someone has replied to your post.

NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

  • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
    Or
  • You may send a Private Message to a Moderator asking for assistance.

Additionally

As a paying customer, you can contact the help desk at support@malwarebytes.org or via this help desk link Here -

Our online experts will be able to assess your problem further

If you're a Corporate or Technician Licensed customer seeking assistance:

Please send an email to Corporate Support Team <corporate-support@malwarebytes.org> with your Cleverbridge order reference number and they will assist you.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.