Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Common problem - cannot run all executable

Skip to first unread message

Man T

unread,
Nov 27, 2009, 9:35:41 PM11/27/09
to
XP SP2
My daughter'c pc got the malware last week after visiting some 'educational'
website (she is in high school).
Every now and then pops up a security warning asking to fix the infected
file to opening a website to ask you to purchase anti-virus software.
McAfee was installed already but cannot fire that up to scan, even cannot
open Windows Explorer.

I tried to run XP in Safe Mode, run MalwareByte's Anti-Malware to scan it,
detected 3 trojans and deleted. Rescan again in Safe Mode found no more
infection, I thought it is safe now.
But just tried to run XP in normal mode, still get the pop up anti-virus
warning, McAfee cannot be fired up.

Any idea I can fix that?


David H. Lipman

unread,
Nov 28, 2009, 7:38:42 AM11/28/09
to
From: "Man T" <alanplts...@yahoo.com.au>

Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

Then post the contents of the HJT log in your post with a full explanation of your problem
and what you have done to date in one of the below expert forums...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


unclesyd

unread,
Nov 29, 2009, 12:14:01 PM11/29/09
to
Dave,
I got got hit with a similar malware/spyware last night going by the name of
Antivirus System Pro. SWP2009 also shows up. At the present I've got 6
security ballons on my screen with the Internet disconnected. If I connect to
the I have no access as everything is redirect to ads for Viagra or a porn
site. Nothing runs except sometimes search and it will not let me find hiden
files as the settings are changed.
McAffee will not run. I got mine during a search (Google) when I clicked on
the wrong site.
I'm using a seperate computer looking for a little guidence.
.
--
syd


"David H. Lipman" wrote:

> .
>

SJ

unread,
Dec 20, 2009, 10:36:37 PM12/20/09
to

Hi,
I hope you have already got the issue fixed. But if you have not, then
continue reading.
I have seen the symptom you mentioned with 2 fake antivirus infections.
Security Tool and Antivirus System Pro. Unfortunately the folder location
has changed a few times, so not sure where it would be on your computer.
Just reply to me, and I will give you some possible locations where you can
look for the infection.
The good news is, once you find the files, it is pretty easy.

--
Regards,
SJ
http://www.newsdemon.com/?ref=10130773

"Man T" <alanplts...@yahoo.com.au> wrote in message
news:uNFhMP9b...@TK2MSFTNGP06.phx.gbl...

0 new messages