GeekPolice
Would you like to react to this message? Create an account in a few clicks or log in to continue.

GeekPoliceLog in

 


descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyInternet Security 2010 virus, locked out computer. HELP

more_horiz
Sorry if this is a repeat, I keep posting and nothing show up!

My computer has been hijacked by the IS 2010 virus, like many others here. The machine is a Dell desktop running XP (i'm currently on a laptop). Currently, when I try to start up in either normal or SAFE mode, after the login page I get a SPYWARE ALERT! box, stating my computer is infected with a worm and lots of other bad stuff. There is not Start button or any files on the desktop. If you click to close the box, it automatically starts the bogus scan. If you then try to close the scan or open task manager, you get a box stating the operation is not authorized. Since I cannot access the internet on the computer, I cannot download any malware removal tools.

Is there anything I can do short of reinstalling windows?

Any help is appreciated.

Thanks

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyIS2010 and stuck on Welcome screen

more_horiz
Moderated Message: Hello, your comment has been removed. Please do not post in another member's topic. If you need help, please read this over and click here to open a new topic.

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
@ tom40650 - Can you download tools from another machine, and transfer them over via USB?

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
I can try. The USB I have is an older one, it is only 128mb (kids took the good ones to school).

If this is large enough, which tools should I download?

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
Yeah, that's fine, the tools/installers/logs are only a few kb each.

Please download the current version of HijackThis from HERE

  • Double click and run the installer.
  • It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  • After installing, you should get the user agreement, press accept and Hijack This will run.
  • Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyUSB boot

more_horiz
I downloaded HijackThis on this machine and copied the files over to the flash drive. The Dell desktop will not boot from the flash drive. I could burn something onto a CD and boot from there. Any options?

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
Hello, can you just download the installer, save it to the flash drive and then drag it to the desktop of the infected computer. Once that's done, install HijackThis and see if it works.

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
I don't really have a desktop anymore. The SPYWARE ALERT! box is the only thing on there after login. There are no icons, or a startup button. Once I plug in the flash drive on the other computer, I don't have access to it

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
Lets see if you can do it in safe mode:

Please do the following in Safe Mode with Networking: as the computer is booting press and hold your "F8 Key" which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to move to "Safe Mode with Networking" and press your Enter key.

Note: With some computers if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the "F8 key", tap the "F8 key" continuously until you get the startup menu.) Once in the start up menu, select "Safe Mode with Networking", then do the following instructions:

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
Same thing in safe mode. Only difference is the nice green field in the background in normal mode vs total black background in Safe mode

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
Download OTL by OldTimer to your Desktop.

  • Close all windows and double click OTL.exe
  • Click Run Scan and let the program run uninterrupted
  • It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
The infected computer has no internet access, and effectively no desktop either, so I can't download and run anything on that machine. Right now I'm working off another computer. Neither normal or safe mode will open to anything but the spyware alert

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
I have the XP recovery disk, and booted to that. I now have a DOS prompt. Does that help?

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
Not really, no idea what's hiding.

Avira AntiVir Rescue System is a Linux-based application that allows accessing computers that cannot be booted anymore.

  • Download The Avira AntiVir Rescue System from Antivir.de.
  • Just double-click on the rescue system package to burn it to a CD/DVD.
  • Then please use that CD/DVD with Avira Rescue System to boot your computer.
You'll get a boot option to either boot from hard drive or AntiVir Rescue System.
Internet Security 2010 virus, locked out computer.  HELP 2i8vzwo

Press the number 2 on your keyboard to boot into AntiVir Rescue System.

Please wait until drivers are loaded and Main menu shows. Then please select the second option “Scan your system with AntiVir” and hit Enter.
Internet Security 2010 virus, locked out computer.  HELP 33dxve1

Under Configuration, please select Scan all files, Try to repair infected files and Rename files if they cannot be removed?.
Internet Security 2010 virus, locked out computer.  HELP 2aaby46

Then please start the scan.

The Avira AntiVir Rescue System wil now

  • repair a damaged system,
  • rescue data,
  • scan the system for virus infections.

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
OK, here's what happens:

Boot Options
1 Boot AntiVir Rescue System (default)
2 Boot from First hard drive

Advanced Users only
3 AntiVir Rescue System (800x600 16) VGA= 788
4 AntiVir Rescue System (1024x768 16) VGA =791
5AntiVir Rescue System VGA= ASK

When I enter !, it does a bunch of data scrolling, then a new screen pops up with a little penguinny looking thing, then some too rapid to read lines of info, then a black screen with "Cannot Display This Video Mode"

I tried 3 times pushing !, then got the same thing (with a different szed "penguin" when I pushed 3 and 4

descriptionInternet Security 2010 virus, locked out computer.  HELP EmptyRe: Internet Security 2010 virus, locked out computer. HELP

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum