cannot open any programs or system tools due to system security

View previous topic View next topic Go down

cannot open any programs or system tools due to system security

Post by icomed on Fri Jun 19, 2009 5:11 pm

Ok, so about two days ago I got the system security spyware. I've been finding ways to remove it, bu tthe problem is the program won't allow me to access any spyware removal programs I download or the taskmanager or the registery or msconfig and basically any other program because it says it is infected.

I can't boot into safemode because it's saying that my version of windows is not activated but I know this is a genuine version. I'm not sure what to do anymore. Is there a way to kill the process without the task manager?

Also I can't make a HJT or Combofix log because system security won't allow the programs to open

icomed
Novice
Novice

Posts Posts : 9
Joined Joined : 2009-06-19
OS OS : Windows XP Pro
Points Points : 27296
# Likes # Likes : 0

View user profile

Back to top Go down

Re: cannot open any programs or system tools due to system security

Post by Belahzur on Fri Jun 19, 2009 5:15 pm

Please download Ice Sword from [You must be registered and logged in to see this link.]

  1. Download the zip to your desktop and extract it.
  2. Open the Ice Sword folder and then launch IceSword.exe.
  3. Will IceSword open?

Also, let me know if you can't unzip it.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245069
# Likes # Likes : 1

View user profile

Back to top Go down

Re: cannot open any programs or system tools due to system security

Post by icomed on Fri Jun 19, 2009 5:25 pm

ok I was able to download and unzip it, but I can't run the program. Every time ia double click it , a little security balloon pops up saying that icesword.exe is infected and that I can't run it

icomed
Novice
Novice

Posts Posts : 9
Joined Joined : 2009-06-19
OS OS : Windows XP Pro
Points Points : 27296
# Likes # Likes : 0

View user profile

Back to top Go down

Re: cannot open any programs or system tools due to system security

Post by Belahzur on Fri Jun 19, 2009 5:26 pm

Right click IceSword.exe, select Rename.
Rename it to winlogon.exe.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245069
# Likes # Likes : 1

View user profile

Back to top Go down

Re: cannot open any programs or system tools due to system security

Post by icomed on Fri Jun 19, 2009 5:32 pm

alright that worked! so what do I do now?

icomed
Novice
Novice

Posts Posts : 9
Joined Joined : 2009-06-19
OS OS : Windows XP Pro
Points Points : 27296
# Likes # Likes : 0

View user profile

Back to top Go down

Re: cannot open any programs or system tools due to system security

Post by Belahzur on Fri Jun 19, 2009 5:50 pm

Hello.
This will not remove the malware, but will only disable it so we can get scanners working, so don't think IceSword is the only tool we need.

  • Look in the left hand bottom of the program and press "Registry"
  • When the registry list opens, drag the line between the two windows so you can see which registry hive you need.
  • Next, open the HKEY_LOCAL_MACHINE, and navigate to the following key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

  • Now look in the right side pane for one or two run values that are just random numbers.
  • Once you have found the value(s), right click it and press "Delete"
  • Okay the prompt and close IceSword.

Reboot normally.
Let me know if you can run things normally now without any fake alerts.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245069
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum