Jump to content

5dayoftheweek or 366218550:2650433770.exe HAS disabled Anti-Virus and PREVENTS MWB from Scanning


Recommended Posts

Hello all!

This is my first post at Malwarebytes' forum. :)

Today, for the first time, Windows XP SP3's Security Center service kept warning me about programs, like Firefox, Outlook Express, Adobe Reader, etc, that were BLOCKED by Windows Firewall and the pop-up window asked if I wanted to DISABLE Windows Firewall for the program I has opened at that time. Thinking this was odd or peculiar, and thinking it may have something to do with the last (single file) Windows Update that I applied yesterday, I chose to allow these programs to be added to Windows Firewall's EXEMPT list. Puzzled by this issue, I started Googling and ran into a strange issue. Each time I clicked on a link, I notices something new loading along with the website I expected to be taken to - 5dayoftheweek(dot)com - and this website effected each Google link that I had hoped to be lauched to. The effects include never launching to any of the hits or websites Google's search found - it always ending up opening some bogus website that had nothing to do with my search.

Thus far, what I know includes a NEW service or program that has shown up, today for the first time. I found this service or program using Windows XP SP3 Task Manager. Specifically, it is 366218550:2650433770.exe and Task Manager cannot END this program. I believe this NEW service or program is also responsible for DISABLING my anti-virus program AVIRA and its service, Avira AntiVir Guard. When I attempt to ENABLE Avira AntiVir Guard, I fail. In short, the system will not permit it.

Conducting a SEARCH using Windows XP SP3's START > SEARCH > Find Files or Folders, locates 366218550:2650433770.exe in \systemroot\ directory. Using the SEARCH window result, I deleted the file. Next, I opened my registry and deleted every reference to 366218550. Rebooted my PC and 366218550:2650433770.exe was back in play according to Task Manager (and still could not be ENDED using Task Manager).

After posting my dilemma at a forum hosted by Avira (my current anti-virus program), one of the moderators instructed me to download and install Malwarebytes. Accordingly, I downloaded Malwarebytes Anti-Malware 1.51.1.1800 and installed it.

At the end of the install, MWB's performed its UPDATE and then the SCAN began but only ran for approx 7 seconds and then the GUI disappeared. I checked Task Manager and the program had been removed.

So, I am now on a fresh PC without this 366218550:2650433770.exe identified by Task Manager, with Avira Guard enabled, and I am wondering if there is a portable version of Malwarebytes that can be installed on a flash drive or burned to a CD which can be run at boot?

Of course, I am also open to any other suggestions.

Thank you.

CurlySue

Link to post
Share on other sites

  • Staff

Hi and welcome to Malwarebytes.

  • Download the file TDSSKiller.zip and extract it into a folder on the infected PC.
  • Execute the file TDSSKiller.exe by double-clicking on it.
  • Wait for the scan and disinfection process to be over.
  • When its work is over, the utility prompts for a reboot to complete the disinfection.

By default, the utility outputs runtime log into the system disk root directory (the disk where the operating system is installed, C:\ as a rule).

The log is like UtilityName.Version_Date_Time_log.txt.

for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt.

Please post that log here.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.

-screen317

Link to post
Share on other sites

  • 4 weeks later...
  • 2 weeks later...
  • Root Admin

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.