Malwarebytes - Cleans Computer, Destroys Internet

[RyanJF]

Hi,

I've used Malwarebytes on and off for the past few years, and have generally had no problems with the product. Lately, however, I've acquired a new sort of virus that's been wreaking absolute havoc on my computer and operating system. The fact that I know virtually nothing about computers other than the bare basics isn't helping me in the slightest. Google can only provide so many answers, I guess.

I got one of those fake "Windows Security 2011" bugs some number of weeks ago, and it's all been downhill from there. The original issue seems to be fixed (I no longer get those popups, and I can get online without having to deal with any sorts of restricted access), but, in the meantime, I've obtained a host of new problems.

For one, every time I try to access a website from Google Search, I'll be redirected to an advertising page. It typically takes me over half a dozen tries to get onto the desired website without being first redirected to some spammy nonsense. This happens to me from time to time while following external links off of Wikipedia or trying to click my way into, say, a subforum or an "Account Management" space. Maybe I'm fooling myself, but it seems like I'm much more brutally redirected (in terms of how long it takes to get onto a website) when trying to get onto MicroSoft or antivirus websites.

Also, it's gotten to the point where I can't download any files, pictures, or programs off of the Internet without having to first end a whole bunch of processes or run RKill. I did a System Restore in the past, as that seemed to be the logical thing to do, but to no avail. Worse yet, I can't even try that again - I go to "Control Panel" (or Search, or Run, or any other number of places) and try to select "System Restore", and the window won't even open. If I try to open up my hard-drive to look at usage or mess around with some programs, I get the message "C:\ is not accessible - Access is denied", as if I were on a high school computer or something.

This is getting to be a major pain in the ass, and any help would be much appreciated.

As I said, when I run Malwarebytes, it always seems to get rid of the problem for a while, but then I can't get online and have to use another user account, where the virus or malware seems to have relocated itself to. Many of my infected files seem to lie within my computer's registry, which I'm no expert at navigating.

[RyanJF]

EDIT:

*can't get online

---> After I run a scan and Malwarebytes quarantines and deletes my infected files, I'm always unable to to use any of my browsers. I was at fault in saying that the Internet is "destroyed" - it clearly still works, as I can use applications such as Skype and MSN Messenger.

[Firefox]

Hello, and Welcome to Malwarebytes

Sounds like you still have some of the infection, possibly a rootkit going on in your computer, please follow the instructions below and an expert will assist you....

If you think you are infected, here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

You have 3 Options that you can choose from as listed below:

[*]Option 1

[CrossTechnology]

Just a suggestion in case you are still experiencing this issue, or if someone else reads this because they are having the same issue.

Trojans such as this one will cut off your internet by changing your internet browsers proxy settings so that it is not connecting properly. This is why services such as MSN/Windows Live Messenger and Skype will work but an internet browser will not.

To fix this, follow these steps:

INTERNET EXPLORER

open start > control panel > internet options OR type inetcpl.cpl in the run box on the start menu

select the tabl labelled Connections and then click on LAN settings

under LAN settings, make sure that:

1. Automatically detect settings is checked
   
2. Use automatic configuration script is unchecked
   
3. Use a proxy server... is unchecked
   

MOZILLA FIREFOX

open Tools > Options

Select "Advanced" followed by the "Network" tab.

Under "Connection" click on "Settings"

Select "Auto Detect Proxy Settings for this network"

IF THIS DOES NOT WORK

XP:Open start > Run

WINDOWS VISTA/7: Open start and type in the search box

the following command - msconfig

NOTE: You may need to boot your computer into safe mode to run this command, as some trojans disable the running of msconfig.

under msconfig, select under boot "safe boot > network", apply and restart the computer.

Once the computer has restarted in safe mode, run your internet application (and make sure the above browser settings are corrected).

From here you can get access to the internet for whatever purpose you need it.

[exile360]

I would personally not recommend using MSCONFIG to force booting into Safe Mode, the F8 method is much safer:

• Never Force Safe Mode! - Temerc Internet Countermeasures
  
• Do Not Force Safe Mode - MalwareTeks Wiki