Computer infected: Can't run anything, including system restore?
(Don't worry, I'm using a different one)
I was in the middle of watching a TV show via a video player and all of a sudden I got a bunch of pop-ups saying my computer was infected. It's not allowing me to run anything - Task manager, system restore, anything. It won't let me download any anti-virus or anything. Whenever I try to do any of these, I get a pop-up saying something like "The executive file [task manager, etc].exe is infected."
Can anyone help me please?
Update:"The exact name of the fake "pop-ups saying my computer was infected" would have helped a lot." I turned my computer off ASAP, so sorry I didn't get the info. I talked to someone and he said don't turn it on until he takes a look at it. I will definitely be burning some discs tonight though. Thanks.
Answers & Comments
Verified answer
Ok... well, it certainly helps that you have two computers.
On the good computer, go to the following website and download Malwarebytes Antimalware:
http://www.malwarebytes.org/
Download the latest version and burn a copy of the install file onto a CD- or DVD-ROM. (Why do this? Because you need to get the install file on the infected computer. A CD or DVD can be used once and thrown away to prevent cross-contamination. If you were to use a thumb drive instead, it is possible the infected computer could infect your thumb drive... and the next time you put that thumb drive in your clean computer, well, now you've infected it, too!)
Now, go to the sick PC and unplug the network cable and boot into safe mode. You do this by pressing the 'F8' key right after you see the initial power-on screen. You should get a boot menu with many options. Select 'Safe Mode' from that list.
Now here's why I recommended Malwarebytes... it's one of the few applications that I've worked with that can actually be installed and run while in safe mode. Once the sick PC is in safe mode, copy the install file over from the CD or DVD I had you create before and run the installer. Follow the on-screen instructions to install... obviously, you can skip the portion when it asks you to update the software. In safe mode, and with the network cable unplugged, you won't be able to update anyway!
Once you have the Malwarebytes program installed, perform a complete and full scan of your computer. Once the scan is complete, remove anything and everything it finds.
Now reboot your computer into the normal desktop... but still leave the network cable unplugged. Once the machine is fully booted (and hopefully you have some control over the PC now), open the Malwarebytes application once again and navigate to the UPDATE tab. Plug in the network cable and give it about 30 seconds to get your computer back on the Internet. Update the Malwarebytes software. Once the update is complete, unplug the network cable once again... we only want to leave the computer on the network long enough to get the latest malware patterns! Now run another full scan with the latest patterns. Just as before remove anything and everything it finds.
Finally, you can reboot your computer with the network cable back in. Hopefully this will have cured your woes.
To be extra certain, download and install a second anti-spyware application such as Superantispyware:
http://www.superantispyware.com/
Or Spybot Search and Destroy:
http://www.safer-networking.org/en/mirrors/index.h...
Run this second application to increase the odds that you've caught everything.
Once you can run these scans, and they come up clean, you can go ahead and uninstall the applications if you wish.
Hopefully that will help clear this trash off your computer and get you back up and running. Good luck!
2
I've run across something like this before and I'm not sure if it was a virus at all. It was something in the temporary folder or a cookie causing the problem. Anti-virus software ran from another partition never detected a virus.
I simply cleared all temp files and cookies and the problem was gone.
You should use this experience as a reason to try out GNU/Linux which has superior security over Microsoft Windows.
No, the system restore would just delete everything on your computer that has changed, but hasn't been saved, since the last checkpoint, which should have been around 2:00A.M. this morning. You will need a good virus protection program to delete the spyware and keep any other viruses away. Avast is a good choice.
Wow! These fake antivirus programs are attacking everywhere tonight. My hands are getting tired from typing so much so I'm going to cut and paste the answer I just finished giving someone else. :-) Good luck.
If you can burn a cd on an unaffected computer there are antivirus programs that can be put on a bootable cd. Ypu boot up the cd and run the antivirus program before Windows loads. Here is a guide and link on doing this: http://www.raymond.cc/blog/archives/2009/11/13/fre...
Here is a program to remove many fake antivirus programs. If you can boot into safe mode and run it it may help. http://www.softpedia.com/get/Antivirus/Remove-Fake...
The exact name of the fake "pop-ups saying my computer was infected" would have helped a lot. The procedure to remove this crap can vary. And there are hundreds of different variants.
Maybe it is one of these?
AntiSpyware XP
AntiSpyware XP 2010
Antivirus XP
Antivirus XP 2010
Total XP Security
XP AntiSpyware 2010
XP Antivirus Pro
XP Guardian Vista Security 2010
XP Security Tool
XP Security Tool 2010
XP Smart Security
XP Smart Security 2010
XP AntiMalware
XP AntiMalware 2010
XP Antivirus Pro
XP Defender
XP Defender Pro
XP Security
XP Security
XP Internet Security
XP Internet Security 2010
Total XP Security
AntiSpyware Vista
AntiSpyware Vista 2010
Antivirus Vista
Antivirus Vista 2010
Vista Security Total
Vista Guardian
Vista Security Tool
Vista Security Tool 2010
Vista Smart Security
Vista Smart Security 2010
Vista AntiMalware
Vista AntiMallware 2010
Vista AntiSpyware
Vista AntiSpyware 2010
Vista Antivirus Pro
Vista Defender
Vista Defender Pro
Vista Security
Vista Security 2010
Vista Internet Security
Vista Internet Security 2010
Total Vista Security
AntiSpyware Win 7
Antivirus Win 7
Antivirus Win 7 2010
Win 7 Security
Win 7 Antispyware 2010
Win 7 Antivirus Pro
Win 7 Guardian
Win 7 Security Tool
Win 7 Security Tool 2010
Win 7 Smart Security
Win 7 Smart Security 2010
Win 7 AntiMalware
Win 7 AntiMalware 2010
Win 7 Antivirus Pro
Win 7 Defender
Win 7 Defender Pro
Win 7 Security
Win 7 Security 2010
Win 7 Internet Security
Win 7 Internet Security 2010
Total Win 7 Security
If it is one of these, Just follow the simple procedure here:
http://www.bleepingcomputer.com/virus-removal/remo...
Just scroll down the page to:
"Automated Removal Instructions for XP Internet Security 2010, Antivirus Vista 2010, and Win 7 Antispyware 2010 using Malwarebytes' Anti-Malware:"
Do NOT buy any of the malware removal products that may be advertised at the top of that web page.
Good luck.
Your computer might infected the popular rogue software. If you want to make things easy, you can standby and watch your problem been resolved by a online legitimate support team.
http://www.teesupport.com/ is their website.
Good luck!
disconnect from the internet on that computer first