1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

i cant access main user account, but others i can acess

Discussion in 'Virus & Other Malware Removal' started by steppenwolf, Jan 2, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. steppenwolf

    steppenwolf Thread Starter

    Joined:
    Apr 9, 2003
    Messages:
    3,015
    theres an advantage to create other user accounts

    i cant run the malwarebytes thing but i set it up on other user acount

    i have the system tool virus

    i have to change my passwords?

    can some creep see these saved passwords stored in mozilla firefox?

    this is so vast and diffult i feel its easier just to reinstall windows xp
     
  2. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    113,993
    It's always a good idea to change passwords when infected but using another computer that is known to be clean.

    This infection sets a proxy server so you can't connect to update security programs so do this first to remove those settings:

    In Internet Explorer go to Tools - Internet Options - Connections Tab - Lan Settings and uncheck "Use a proxy server for your LAN" and check "Automatically detect settings".

    In Firefox go to Tools - Options... -> Advanced Tab -> Network Tab -> "Settings" under Connection and click on "No proxy".

    Do not reboot the machine.

    Download and run the following tool to help allow other programs to run. (Courtesy of BleepingComputer.com)
    There are 4 different versions. If one of them won't run then download and try to run the other one. Do not reboot after running this program.

    Vista and Win7 users need to right click and choose Run as Admin
    You only need to get one of them to run, not all of them.
    1. rkill.exe
    2. rkill.com
    3. rkill.scr
    4. rkill.pif

    Again do NOT reboot the machine.

    Now see if you can update MalwareBytes and if you can run a full system scan and post the log back here please.
     
  3. steppenwolf

    steppenwolf Thread Starter

    Joined:
    Apr 9, 2003
    Messages:
    3,015
    thanks cookie

    i did seem to remove the damn thing

    i started up in safe mode and ran the anti malware thing and its seems gone now

    but i wonder if they got my passwrods

    why would they need them?

    i just use gift cards i buy for myself and theyre all at zero now and i dont do banking online never!
     
  4. steppenwolf

    steppenwolf Thread Starter

    Joined:
    Apr 9, 2003
    Messages:
    3,015
    i downloaded the malwarebytes thing whcich i never heard about until last night and then reboted to delete the crap

    what does rebooting do ?
     
  5. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    113,993
    Fake programs like this are not generally known to steal passwords but you never know exactly what the payload can be as they can open backdoors to other infections. That's why it's always wise to change the passwords regardless of what type of infection you have.

    I would suggest continuing though as there could still be remnants.

    Also, this infection is known to alter the hosts file. Are you running a custom one?

    Please go here to download HijackThis.
    • To the right of the green arrow under HijackThis downloads click on the Executable button and download the HijackThis.exe file to your desktop.
    • Double-click the HijackThis.exe file on your desktop to launch the program. If you get a security warning asking if you want to run this software because the publisher couldn't be verified click on Run to allow it.
    • Click on the Scan button. The scan will not take long and when it's finished the resulting log will open automatically in Notepad.
    • Click on the Save log button and save the log file to your desktop. Copy and paste the contents of the log in your post.
    Please do not fix anything with HijackThis unless you are instructed to do so. Most of what appears in the log will be harmless and/or necessary.

    Please download DDS by sUBs to your desktop from one of the following locations:

    http://www.techsupportforum.com/sectools/sUBs/dds
    http://download.bleepingcomputer.com/sUBs/dds.scr
    http://www.forospyware.com/sUBs/dds

    Disable any script blocker you may have as they may interfere and then double-click the DDS.scr to run the tool.

    When DDS has finished scanning, it will open two logs named as follows:

    DDS.txt
    Attach.txt

    Save them both to your desktop. Copy and paste the contents of the DDS.txt and Attach.txt files in your reply please.
     
  6. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/972198

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice