JOIN NOW LOG IN
iVillage GardenWeb iVillage GardenWeb THE INTERNET'S GARDEN & HOME COMMUNITY ADVERTISEMENT
Blogs Forums Photo Galleries Ask The Experts Tools & Directories        
Return to the Computer Help Forum | Post a Follow-Up

 o
help *virus*

Posted by cleanshirt1 (My Page) on
Sun, Nov 8, 09 at 16:14

Hello,

Basically, I have no way to interact with my computer to fix it with typical software. I am on a different computer. What do I do? Is there some anti-virus software can fix this problem automatically upon start up?? This virus is attacking everything.
Anyways, the program thatis in the task manager are, from what I can remember:

b.exe

There is at least one other virus but I can't remember it's name.

Basically what it does is pretend to be anti-spyware program called "protection system" or "protection service" that keeps asking me to pay for spywayre protection.
My real windows firewall keeps coming up with messages telling me it has blocked such and such from my computer.

Another thing is that if I try to visit any real page like NORTON, etc it won't let me, it goes to yet another ad page.

ANYWAYS, after leaving the computer off for a day and trying it today, basically it won't let me start in Safe mode, it attempts it and then says 'windows was unable to start". It only starts up in normal mode.
So, in the normal mode nothing occurs, I can only see my desktop background - no program icons nor "start" bar at the bottom.
Ctrl-alt-del reveals that the b.exe and several other programs are running, closing them only lasts for a moment.

Thanks,
DJ


Follow-Up Postings:

 o
RE: help *virus*

Basically what it does is pretend to be anti-spyware program called "protection system"

Here is a link for additional information.

You will need to go to a Malware removal forum here http://www.landzdown.com/index.php?board=26.0

Post your problem there.

If possible download malwarebytes from here http://www.malwarebytes.org/ using the good computer and install it on a flash drive. Insert the flash drive on to the bad computer and see if you can run it that way. The b.exe is a worm/trojan. You have quite a mess there.

Here is a link that might be useful: protection service


 o
RE: help *virus*

One thing you could try is to use another computer (not the infected one) to download an antivirus program that would be burned onto a CD. You would then boot from this CD, not the infected computer's hard drive. Hopefully, you could then clean the infection. You would have to download a .iso file (an image), and you'd then need software that will "burn the image", not just copy file, onto a CD. Then when you boot the infected machine, bring up the boot menu before it goes into Windows (usually by pressing F12), insert the CD and tell it to boot the CD instead of the hard drive. Then, follow instructions.

The site below is only one suggestion and I have not used any of the programs listed. You could probably search and find other similar sites. If this method doesn't work for you, the alternatives I know of would be to either remove the hard drive and install it as a slave in another machine to clean it, or format the infected hard drive and reinstall Windows. Be advised my knowledge is limited, and I expect others will have useful suggestions. Good luck.

Here is a link that might be useful: Free Antivirus and Rescue CD's


 o
RE: help *virus*

I have seen success with this one:

This bootable rescue CD, containing the well-respected Avira Antivir software, can be used to scan and clean a system infected with malware. To use it, burn the ISO as a disk image to your CD or DVD. (See the above description of how to use the ISO file for more information.) When booted up, the user interface is by default in German. Look for the UK flag somewhere at the bottom of the screen and click it to get the English user interface.

That's on the link azinon provided (Avira) rescue cd..


 o
RE: help *virus*

I agree you should visit LzD forum and register there and post in this section of the forum
Analysis and Malware Removal
you should post a link to this thread here so we have all the info there and someone will help you.


 o
RE: help *virus*

Hey thanks for all your tips.

Here is the advice from that website
http://www.landzdown.com/index.php?action=post;topic=37788.0;num_replies=3

You will see I noticed the file Opeia.exe which the responder on that site has identified as pretty nasty. Would you all agree with her that I should try to re-format the computer (not sure how to do that but...) or should I still try to re-boot from an ISO file (havent done that in my life, yet either...)

Thanks!
Derek


 o
RE: help *virus*

Can't view the landzdown link without becoming a member.

Doing the .iso burn and boot will be a lot faster and much less effort than the reformat. You can still reformat if it does not work. Your call.


 o
RE: help *virus*

Opeia.exe,

"This allows hackers to remotely control your computer, steal critical system information and Download and Execute files."

Reformat, reinstall the operating system, or use your recovery discs to restore computer to factory settings. As was suggested at Landzdown...


 o
RE: help *virus*

HELP
your post at LzD. I would follow Corrine's advice, she is without doubt one of the best on the internet at this.
I personally would reformat if I knew I had Opeia backdoor on my pc, I would never feel comfortable using it with confidence. Backdoors are just not something to play around with.
But Corrine does offer to help you out with out formatting if you select that route.


 
 

 

 


Click here to learn more about in-text links on this page.



iVillage GardenWeb: The Internet's Garden & Home Community  
  iVillage Home & Garden Network