RSS iconTwitter iconFacebook icon

The Trek BBS title image

The Trek BBS statistics

Threads: 139,128
Posts: 5,401,346
Members: 24,745
Currently online: 664
Newest member: lafzsurat

TrekToday headlines

September-October Trek Conventions And Appearances
By: T'Bonz on Aug 29

Lee Passes
By: T'Bonz on Aug 29

Trek Merchandise Sale
By: T'Bonz on Aug 28

Star Trek #39 Villain Revealed
By: T'Bonz on Aug 28

Trek Big Bang Figures
By: T'Bonz on Aug 28

Star Trek Seekers Cover Art
By: T'Bonz on Aug 27

Fan Film Axanar Kickstarter Success
By: T'Bonz on Aug 27

Two New Starship Collection Ships
By: T'Bonz on Aug 26

Trek Actor Wins Emmy
By: T'Bonz on Aug 26

Trek Retro Watches
By: T'Bonz on Aug 26


Welcome! The Trek BBS is the number one place to chat about Star Trek with like-minded fans. Please login to see our full range of forums as well as the ability to send and receive private messages, track your favourite topics and of course join in the discussions.

If you are a new visitor, join us for free. If you are an existing member please login below. Note: for members who joined under our old messageboard system, please login with your display name not your login name.


Go Back   The Trek BBS > Lounges & General Chat > Miscellaneous

Miscellaneous Discussion of non-Trek topics.

Reply
 
Thread Tools
Old April 7 2010, 04:46 PM   #1
bigdaddy
Vice Admiral
 
Location: Space Massachusetts
I need some help, my computer has been taken over

Tuesday night at around 11pm my computer had this annoying "XP Antimalware 2010" thing pop up, it's obviously some type of virus, or adware so I tried to get rid of it. I think disabled AVG free virus checker because that hasn't been working since then too. After an hour of it being annoying I went to bed.

I woke up today and I can't open anything but folders. Everytime I try I get this... "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item".

So what the hell do I do? I have two accounts on the computer and it's only attacking the main one, the administration one, for now. Usually I only get adware things on the computer, those are easily found and deleted, but now I can't really do anything. Unless I plan on going folder to folder looking for it. I really don't want to reinstall Windows because I just did that like 6 months ago.

Any help (besides saying "buy a Mac) would be great.
__________________
The powerful play goes on, and you may contribute a verse.
bigdaddy is offline   Reply With Quote
Old April 7 2010, 05:03 PM   #2
farmkid
Commodore
 
Re: I need some help, my computer has been taken over

This is malware. It masquerades as a security program that "finds" infections on your computer and wants you to upgrade to its full paid version to remove them. It's really just holding your computer hostage. A quick Google search will find you instructions on how to remove it.
farmkid is offline   Reply With Quote
Old April 7 2010, 05:23 PM   #3
Jadzia
on holiday
 
Location: England
Re: I need some help, my computer has been taken over

I recently cleared a malware program off my computer. I noticed whenever I changed the date, it would try to access the internet, and I thought that was odd.

None of my AV software detected any problems, but running Process Explorer, I could see a suspicious dll with random letters as its filename, that was running as a thread in explorer.exe. The dll was encrypted somehow, and refused to delete, even when the thread was terminated.

(Process explorer is portable software that you can unzip to a usb stick and run it from there without installation.)

I used a Live copy of Knoppix to boot my computer and access the hard drive that way. I deleted the suspicious dll as well as a couple of other files with the exact same date/time.

Computer no longer tries to access the internet when I change the system date.
__________________
.

Last edited by Jadzia; April 7 2010 at 05:42 PM.
Jadzia is offline   Reply With Quote
Old April 7 2010, 05:37 PM   #4
bigdaddy
Vice Admiral
 
Location: Space Massachusetts
Re: I need some help, my computer has been taken over

Thank you both, I have been spending hours trying to figure something out, I have no clue where to start.
__________________
The powerful play goes on, and you may contribute a verse.
bigdaddy is offline   Reply With Quote
Old April 7 2010, 06:27 PM   #5
Mr. B
Vice Admiral
 
Mr. B's Avatar
 
Location: New Orleans
Send a message via ICQ to Mr. B Send a message via AIM to Mr. B Send a message via Windows Live Messenger to Mr. B Send a message via Yahoo to Mr. B
Re: I need some help, my computer has been taken over

How hard would it be for you to back everything up and just wipe the machine?
__________________
“Ridicule is the tribute paid to the genius by the mediocrities.”
-Oscar Wilde
Mr. B is offline   Reply With Quote
Old April 7 2010, 06:30 PM   #6
propita
Rear Admiral
 
Location: fresno, ca, us
Re: I need some help, my computer has been taken over

A friend did just that on my other laptop. He had to go through each file as I had not backed them up--but that the backups themselves could've been infected anyway, so backups might've been pointless. DOZENS of viruses.

He said McAfee (came with Comcast) recognized a number of the viruses but did nothing about them. Comcast has since switched to Norton.
propita is offline   Reply With Quote
Old April 7 2010, 08:41 PM   #7
Pingfah
Admiral
 
Pingfah's Avatar
 
Location: Cornwall, UK
Re: I need some help, my computer has been taken over

Thats a nasty bugger you've got there, it'll be in your prefetch files and in your registry, you'll not be able to get rid of it manually unless you know exactly what you are looking for.

If you can get programs to run on the other account you need a free piece of software called Malwarebytes.

http://www.malwarebytes.org/mbam.php

It really is extremely good at tracking these things down. Only problem is these XPantivirus 2010 and all the varients of which, which it sounds like you have, are specifically designed to prevent the program running. However, once it is installed, if you change the mbam.exe file to mbam.scr you shoud be able to run it.
__________________
So it goes.
Pingfah is offline   Reply With Quote
Old April 7 2010, 08:57 PM   #8
T'Baio
Admiral
 
T'Baio's Avatar
 
Location: Ontario, Canada
Re: I need some help, my computer has been taken over

Buy a M...oh, forget it.
__________________
Making my first feature film, Synchronicity
www.synchronicityfilm.ca
IndieGoGo
On Facebook
T'Baio is offline   Reply With Quote
Old April 7 2010, 09:28 PM   #9
Lindley
Moderator with a Soul
 
Location: Fairfax, VA
Re: I need some help, my computer has been taken over

Yeah, a McDonalds isn't going to help with this one.
__________________
Lead Organizer for EVN: Firefly.
"So apparently the really smart zombies have automatic weapons!"
-Torg, Sluggy Freelance
Lindley is offline   Reply With Quote
Old April 7 2010, 10:02 PM   #10
bigdaddy
Vice Admiral
 
Location: Space Massachusetts
Re: I need some help, my computer has been taken over

Pingfah wrote: View Post
Thats a nasty bugger you've got there, it'll be in your prefetch files and in your registry, you'll not be able to get rid of it manually unless you know exactly what you are looking for.

If you can get programs to run on the other account you need a free piece of software called Malwarebytes.

http://www.malwarebytes.org/mbam.php

It really is extremely good at tracking these things down. Only problem is these XPantivirus 2010 and all the varients of which, which it sounds like you have, are specifically designed to prevent the program running. However, once it is installed, if you change the mbam.exe file to mbam.scr you shoud be able to run it.
That is scanning for things right now. I think I got my anti-virus to actually "vault" the evil files. It took a few tries to get it to install and run but it's going.

I usually only get adware, which is real easy to get rid of, find the file through a scan and delete the folder titled "REHUygaUYH78954SDHGhgrhgs6". This one I'm like "What the fuck is going on?" It's sick.
__________________
The powerful play goes on, and you may contribute a verse.
bigdaddy is offline   Reply With Quote
Old April 7 2010, 10:15 PM   #11
Pingfah
Admiral
 
Pingfah's Avatar
 
Location: Cornwall, UK
Re: I need some help, my computer has been taken over

OK, it may not be the end of your problems, as you need to be really thorough with these ones, they are so nasty.

If it comes back let me know because i've had quite a bit of practice at removing this particular kind from various computers at work, and just when you think you've got it cracked, BAM, it's back
__________________
So it goes.
Pingfah is offline   Reply With Quote
Old April 7 2010, 10:30 PM   #12
bigdaddy
Vice Admiral
 
Location: Space Massachusetts
Re: I need some help, my computer has been taken over

Thanks for the warning. It really is something evil.
__________________
The powerful play goes on, and you may contribute a verse.
bigdaddy is offline   Reply With Quote
Old April 7 2010, 10:48 PM   #13
bigdaddy
Vice Admiral
 
Location: Space Massachusetts
Re: I need some help, my computer has been taken over

It's winning...
__________________
The powerful play goes on, and you may contribute a verse.
bigdaddy is offline   Reply With Quote
Old April 7 2010, 11:32 PM   #14
The Fatman
Captain
 
The Fatman's Avatar
 
Location: Buffalo, NY
Send a message via AIM to The Fatman
Re: I need some help, my computer has been taken over

malwarebytes is good, I also recommend Microsoft Security Essentials, which is totally free and has an amazing detection/removal rate.
The Fatman is offline   Reply With Quote
Old April 7 2010, 11:52 PM   #15
Omnius
Vice Admiral
 
Omnius's Avatar
 
Location: ::1
View Omnius's Twitter Profile Send a message via Windows Live Messenger to Omnius
Re: I need some help, my computer has been taken over

T'Baio wrote: View Post
Buy a M...oh, forget it.
Or just run Linux
__________________
"Have you tried turning it off and on again??"
Omnius is offline   Reply With Quote
Reply

Bookmarks

Tags
computer problems, virus

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT +1. The time now is 09:06 PM.

Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
FireFox 2+ or Internet Explorer 7+ highly recommended.