New personal protection virus HELP

View previous topic View next topic Go down

New personal protection virus HELP

Post by khai88 on 9th December 2009, 10:29 am

I just get that virus yesterday now my entire window just turn blue can not be use, all program i try run will just shut down, the anti virus i just download also can not be run since ever time i install it it just get shut down, the weird part is the only thing i can use is the internet not even the ctrl+alt+delete can be use

khai88
Novice
Novice

Posts Posts : 6
Joined Joined : 2009-12-09
OS OS : XP
Points Points : 25648
# Likes # Likes : 0

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by Belahzur on 9th December 2009, 2:17 pm

Hello.

Please download exeHelper from one of the two links.
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

  • Double-click on exeHelper.com or exeHelper.scr to run the fix.
  • A black window should pop up, press any key to close once the fix is completed.
  • Post the contents of log.txt (Will be created in the directory where you ran exeHelper.com)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

Please download the current version of HijackThis from [You must be registered and logged in to see this link.]

  • Double click and run the installer.
  • It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  • After installing, you should get the user agreement, press accept and Hijack This will run.
  • Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by khai88 on 10th December 2009, 4:02 am

ok i already download all the file BUT it can not be install every time i click it it just get close i see that another person have the same problems as me BUT now even my msconfig also can not be use every time i i restarts the com it will still be auto on

khai88
Novice
Novice

Posts Posts : 6
Joined Joined : 2009-12-09
OS OS : XP
Points Points : 25648
# Likes # Likes : 0

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by khai88 on 10th December 2009, 3:52 pm

ok i use Rkill and it did shut the virus down for few second but i still can not use malware and after that few second the virus rerun itself i also try msconf by unclick every box but every time i restarts com the box will auto click back ( this delay the virus form running like 1-2sec normaly it run as soon as the com is up)

khai88
Novice
Novice

Posts Posts : 6
Joined Joined : 2009-12-09
OS OS : XP
Points Points : 25648
# Likes # Likes : 0

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by Belahzur on 10th December 2009, 8:13 pm

Are you able to run exeHelper?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by khai88 on 11th December 2009, 3:17 am

Ok first i need to say is ALL program will be shut down after a few second i MEAN ALL, lucky rkill use less then that so i can shut the virus down for a few more second in that time if my hand is fast enough i manage to do exehelper but every time after it delete it also afew second later the virus reapper again


exeHelper by Raktor
Build 20091204
Run at 11:09:30 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Killed process personalprotector.exe
Checking for bad files...
Deleting file C:\Program Files\Personal Protector\personalprotector.exe
Checking for bad registry entries...
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\personalprotector
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

exeHelper by Raktor
Build 20091204
Run at 11:10:08 on 12/11/09
Now searching...
exeHelper by Raktor
Build 20091204
Run at 11:10:24 on 12/11/09
Now searching...
Checking for numerical processes...
exeHelper by Raktor
Build 20091204
Run at 11:10:39 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
exeHelper by Raktor
Build 20091204
Run at 11:10:54 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Killed process personalprotector.exe
Checking for bad files...
Deleting file C:\Program Files\Personal Protector\personalprotector.exe
Checking for bad registry entries...
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\personalprotector
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

exeHelper by Raktor
Build 20091204
Run at 11:11:39 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
exeHelper by Raktor
Build 20091204
Run at 11:11:54 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Killed process personalprotector.exe
Checking for bad files...
Deleting file C:\Program Files\Personal Protector\personalprotector.exe
Checking for bad registry entries...
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\personalprotector
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

khai88
Novice
Novice

Posts Posts : 6
Joined Joined : 2009-12-09
OS OS : XP
Points Points : 25648
# Likes # Likes : 0

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by khai88 on 12th December 2009, 3:56 pm

new info hope can help


Running from: C:\z.exe

Log file at : C:\Documents and Settings\user\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...





Finished!


second one

Volume in drive C is h
Volume Serial Number is BD9D-E600

Directory of C:\WINDOWS\system32

04/08/2004 07:56 180,224 scecli.dll

Directory of C:\WINDOWS\system32

04/08/2004 07:56 407,040 netlogon.dll

Directory of C:\WINDOWS\system32

04/08/2004 07:56 55,808 eventlog.dll
3 File(s) 643,072 bytes

Directory of C:\WINDOWS\system32\dllcache

04/08/2004 07:56 180,224 scecli.dll

Directory of C:\WINDOWS\system32\dllcache

04/08/2004 07:56 407,040 netlogon.dll

Directory of C:\WINDOWS\system32\dllcache

04/08/2004 07:56 55,808 eventlog.dll
3 File(s) 643,072 bytes

Total Files Listed:
6 File(s) 1,286,144 bytes
0 Dir(s) 11,499,458,560 bytes free

khai88
Novice
Novice

Posts Posts : 6
Joined Joined : 2009-12-09
OS OS : XP
Points Points : 25648
# Likes # Likes : 0

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by Belahzur on 12th December 2009, 8:44 pm

Can you run Hijack This?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by khai88 on 13th December 2009, 3:32 am

can not

khai88
Novice
Novice

Posts Posts : 6
Joined Joined : 2009-12-09
OS OS : XP
Points Points : 25648
# Likes # Likes : 0

View user profile

Back to top Go down

Re: New personal protection virus HELP

Post by Belahzur on 14th December 2009, 12:37 am

Please download and run this tool.

Download Malwarebytes' Anti-Malware from [You must be registered and logged in to see this link.]

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245101
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum