Not sure of what Virus I have but I cannot browse internet

scarp3 · by scarp3 on Tue 26 Jan 2010, 7:00 am

First topic message reminder :

I have Avast anti virus, malware and spyware but got something I didn't want! I had a pop up window on my desk top saying I may be infected and all my icons were outlined in red. I ran all the scans from the above three protectors and the pop up windows and the red outline went away, BUT, cannot get any pages on the internet. I call my local provider and we went thru all the test and check marks and then they gave me someone that said they could remove my virus for $79.95. I have been digging on the internet from work and then going home and trying, but can't get anywhere. I do see where others are being told to restart computer in safe mode, IF i can do this...then what? Thank you soooo much in advance.

scarp3 · by scarp3 on Mon 01 Feb 2010, 1:01 pm

Here they are...

CKScanner - Additional Security Risks - These are not necessarily bad
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\malwarebytes.anti-malware.v1.37.multilingual.win2kxp2k3vista.incl.keygen-crd\crd.exe
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\malwarebytes.anti-malware.v1.37.multilingual.win2kxp2k3vista.incl.keygen-crd\crude.nfo
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\malwarebytes.anti-malware.v1.37.multilingual.win2kxp2k3vista.incl.keygen-crd\file_id.diz
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\malwarebytes.anti-malware.v1.37.multilingual.win2kxp2k3vista.incl.keygen-crd\thumbs.db
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\malwarebytes.anti-malware.v1.37.multilingual.win2kxp2k3vista.incl.keygen-crd\setup\mbam-setup.exe
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\superantispyware.professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd\crd.exe
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\superantispyware.professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd\crude.nfo
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\superantispyware.professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd\file_id.diz
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\superantispyware.professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd\thumbs.db
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\superantispyware.professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd\keygen\install.txt
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\superantispyware.professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd\keygen\keygen.exe
c:\documents and settings\compaq_owner.your-f78bf48ce2\desktop\superantispyware.professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd\setup\superantispywarepro.exe
c:\documents and settings\compaq_owner.your-f78bf48ce2\my documents\superantispyware[1].professional.v4.26.1006.multilingual.winall.incl.keygen.and.patch-crd.rar
c:\program files\superantispyware\keygen.exe
c:\program files\wildtangent\apps\gamechannel\games\cccde323-c76d-44da-bb5b-b8abe767756e\data\full\art\actors\resources\asteroid3cracks.wsbm
scanner sequence 3.DK.11
----- EOF -----

cheetah-Anti-Rogue v1.2.10
by DragonMaster Jay

Microsoft Windows XP [Version 5.1.2600]
Date: 02/01/2010 - Time: 11:59:17 - Arch.: x86

-- Malware tools check --
Malwarebytes' Anti-Malware
SUPERAntiSpyware

-- Known infection --

C:\Program Files\SUPERAntiSpyware\keygen.exe (Trj.Agent-StolenSoftware)

Extra message: Detection only.

EOF

**DragonMaster Jay** · by **DragonMaster Jay** on Mon 01 Feb 2010, 3:47 pm

Your computer has keygens, which is a form of software piracy. What is so bad about Cracks, Hacks, Pirated software, warez, or Keygens?

Most popular cracks or keygens I see, are for Adobe CS3, a lot of different games, Nero, Kaspersky antivirus, and much more. All of these cracks and keygens have what is called "cloaked malware," which is a form of spyware or viruses or trojans that hide themselves inside the keygen or crack files. Most hacks for games that come in the form of a program or installer, will also be infected. It is the opportunity for attackers to present a seemingly safe situation where the opportunity to steal something is in play, while the malware infects your system in the process. Yes, it will install what you were looking for, but also allow malware to potentially take control of your computer.

Lastly, it is illegal. I will counsel you that we do not report such incidents. However, it is not good practice to pirate software.

==

Please open Malwarebytes, click the Update tab, and click Check for Updates. Then, click the Scanner tab, select Perform Quick Scan, and press Scan. Remove selected, and post the log in your next reply.

scarp3 · by scarp3 on Mon 01 Feb 2010, 4:30 pm

Can't open Malware....get error 707 (2,0 )

I have a question...I didn't totally understand your above explanation. The only thing I have done, that would be considered "illegal" is some music. I know ANY music is illegal, so it won't happen again, but Are there games and other stuff on here too?

**DragonMaster Jay** · by **DragonMaster Jay** on Mon 01 Feb 2010, 4:53 pm

c:\program files\superantispyware\keygen.exe

This is identified as a SuperAntiSpyware keygen, for example.

Which this is one part of why your computer is infected.

======

As this infection deletes a core executable of Malwarebytes' we will need to download a new copy of it and put it in the C:\program files\Malwarebytes' Anti-Malware\ folder. To download the file please click on the following link: [You must be registered and logged in to see this link.]

When your browser prompts you where to save it to, please save it to the C:\program files\Malwarebytes' Anti-Malware\ folder. When downloading the file, it will have a random filename. Please leave the filename the way it is as it is important that it is not changed. You may want to write down the name of the file as you will need to know the name in the next step.
Once the file has been downloaded, open the C:\program files\Malwarebytes' Anti-Malware\ folder and double-click on the file you downloaded in step 8. MBAM will now start and you will be at the main program screen.

Do a scan and let me know if it worked ok.

scarp3 · by scarp3 on Mon 01 Feb 2010, 5:31 pm

I downloaded from the Random exe and now have an icon on my desktop with the random file name.

I can't find the C:\program file......

If I double click on the icon on the desktop..I get another error ...707 (3, 0 )

**DragonMaster Jay** · by **DragonMaster Jay** on Mon 01 Feb 2010, 8:14 pm

Open NOTEPAD.exe and copy/paste the text in the codebox below:
(don't forget to copy and paste REGEDIT4)

Code:: REGEDIT4 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog] "Start"=dword:00000004

Save this as fix.reg Choose to "Save type as - All Files"
It should look like this:

Double click on fix.reg & allow it to merge into the registry

Then, let me know if it will run.

scarp3 · by scarp3 on Tue 02 Feb 2010, 4:28 am

I will do this tonight. Thank you!

scarp3 · by scarp3 on Wed 03 Feb 2010, 2:56 pm

I did this, but wasn't sure what I was suppose to run.

**DragonMaster Jay** · by **DragonMaster Jay** on Wed 03 Feb 2010, 8:24 pm

Malwarebytes

scarp3 · by scarp3 on Thu 04 Feb 2010, 5:54 am

Oh, Okay! DUH! I will do it this evening.

Thank you.

**DragonMaster Jay** · by **DragonMaster Jay** on Thu 04 Feb 2010, 9:17 am

scarp3 · by scarp3 on Thu 04 Feb 2010, 4:08 pm

won't run. get error 707 (3,0)

**DragonMaster Jay** · by **DragonMaster Jay** on Thu 04 Feb 2010, 5:58 pm

Please download [You must be registered and logged in to see this link.] by DragonMaster Jay and save it to your Desktop.

Right-click on SpiderKill.zip and click Extract All. Follow the prompts and read carefully, to save it to your Desktop.
Double-click on the SpiderKill folder, and then double-click on SpiderKill.bat and follow all the prompts in the program.
Within a minute, it will save its log titled SpiderKill.txt. Please post that in your next reply. You may have to use two or three posts to be able to fit the information in.

scarp3 · by scarp3 on Fri 05 Feb 2010, 5:47 am

okay, I will do it this evening.

**DragonMaster Jay** · by **DragonMaster Jay** on Fri 05 Feb 2010, 10:57 am

Ok.. Post when ready and I will look at it.

Not sure of what Virus I have but I cannot browse internet

Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet

Re: Not sure of what Virus I have but I cannot browse internet