heatmaster Posted March 10, 2011 ID:398515 Share Posted March 10, 2011 Please can some one help me, I have a major issue on my work computer (which is a server for another 4 pc's)I have just been hit by a rather nasty virus which wouldnt let me run either CTRL ALT DEL, Spybots or Malware Remover in normal mode.I opened an email which I thought was genuine (as I was due to be receiving a package from UPS). Immediately AVG recognised the Virus, So i ran the scan, halfway through it flashed up a warning screen (I am cautious over these as I am aware they are normally viruses); started to read it and before I could CTRL ALT DEL and disable (rather than clicking OK or Cancel) it started to download itself. At this point it cleared away all of the work that I had open and also cleared off AVG and started up one of these fake anti malware programmes, I then tried to run spybots & malware bytes immediately both were denied (the system mentioned something about not being able to use the registry)So I reset the computer, and a blue screen came up with poorly written English (spelling & grammar) informing me my computer was infected and the only way to eradicate was to buy their software (obviously I knew this was a virus) so I restarted the PC again and ran in safe mode. Updated and ran Malwarebytes which removed 5 trojans, ran spybot and it got as far as approx 165000 files Fraud.UPS.Invoice then hung upI can only assume that the virus is still there as a result (as it was an email tagged as UPS that started it)Please can you help with the removal of this nasty, I would be forever grateful (a few years ago you helped me remove a similar virus and I have recommended your site ever since)Many ThanksDarren TillbrookIsle of Wight, United Kingdom Link to post Share on other sites More sharing options...
heatmaster Posted March 10, 2011 Author ID:398534 Share Posted March 10, 2011 OK to update, I have uninstalled and reinstalled malwarebytes, renamed it iexplore.exe (as per other threads) it has not found any other threats yet!!! but I am sure there is still something there, I am going to restart in normal mode now and see if it has gone away yetOh I also ran RKill and that found nothing Link to post Share on other sites More sharing options...
Staff screen317 Posted March 12, 2011 Staff ID:399311 Share Posted March 12, 2011 Hi and welcome to Malwarebytes.Are you user a corporate license for these work computers?Please update MBAM, run a Quick Scan, and post its log.Next, download DDS by sUBs and save it to your Desktop.Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post DDS.txt directly into your reply. Link to post Share on other sites More sharing options...
Staff screen317 Posted March 25, 2011 Staff ID:404744 Share Posted March 25, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts