garrettmoore Posted March 22, 2011 ID:403292 Share Posted March 22, 2011 EDIT- I understand that posting the log of a MWB scan is typically the first step, but I cannot get it to run under the infected user account. Is a log of a scan ran under the "Administrator" account of safe-mode still effective?Hi, my mom's computer became infected with the "Windows XP Security 2011" virus. I tried booting in safe-mode but the virus was preventing MWB from running. For some reason she had another user account on the computer that was never used, so I tried logging into it and the computer ran fine without the virus running at startup. I was able to run a full MWB scan there, it found numerous infections and deleted them all. I then rebooted under her usual account. The virus didn't run at startup but any time I clicked an icon on the desktop, even an application, a Windows box appears asking me to "choose the program you want to use to open this file". Trying to open "System Restore" generates the same box.Then, if I open the Control Panel and click any icon in there, it opens a box saying "C:\WINDOWS\system32\rundll32.exe Application not found". Trying to open MWB from the Start menu generates the same box.Does this virus only try to obtain your CC info when you "purchase the full version", or does it do something else?Any help? Thank you! Link to post Share on other sites More sharing options...
MrCharlie Posted March 22, 2011 ID:403331 Share Posted March 22, 2011 Welcome to the forum.Carefully read and follow this Guide.Make sure you run rkill and then immediately run MBAM as desribed.Most important....update MBAM before you run it.Post the logs back here, Good Luck....MrC Link to post Share on other sites More sharing options...
MrCharlie Posted March 28, 2011 ID:406370 Share Posted March 28, 2011 How are we doing??Do you still need help or can I close this post?MrC Link to post Share on other sites More sharing options...
LDTate Posted March 30, 2011 ID:407417 Share Posted March 30, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts