Home / Software / Computer viruses and spyware / Window Police Pro has taken over, please HELP!
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] - (Bottom) Print
Author Topic: Window Police Pro has taken over, please HELP!  (Read 966 times)
jupiter2000
Topic Starter
Rookie



Posts: 12


« on: November 06, 2009, 02:35:28 PM »

 greetings,
 Im trying to remove this from my friends desktop pc.
they have WinXP sp3.
MBAM is on desktop but it will not run.
No internet.
cant run in safe mode; safe mode w/ networking--keep getting
blue screen
pc starts in regular mode but then is attacked by Win police pro,
task manager is disabled so that rules out system restore?
Pc has trendmicro and the msgs say cryp fake av-17...
Antivirus pro 2010 and Security Tool are also present and
are in task bar.
I have looked around forums and have already burnd the Avira
Antivir rescue system.
Just want to get more info on what steps to take before I try
this. I am a novice so I dont want to make this pc worse although
its pretty bad!
thanks in advance!

IP logged
Quantos
Guru



Thanked: 158
Posts: 4,041

Experience: Experienced
OS: Windows Vista


Union Proud IW 720

Iron Workers Local 720 1 1
« Reply #1 on: November 06, 2009, 02:39:28 PM »

I'm going to get you to go here.  Follow the directions carefully, and a specialist will be with you.
IP logged

"Ah the agony, ah the shame, making one man's privates - public for a game..."  Mel Brooks
jupiter2000
Topic Starter
Rookie



Posts: 12


« Reply #2 on: November 06, 2009, 02:56:48 PM »

Thanks Quantos!
Ive read it and the main problem is i cant d/l any of those steps in any mode.
i havent tried the add/remove step, so Im going to try that one.
wondering if i can burn these programs from other pc and then
transfer to infected pc? Ive really never had to burn/transfer anything
besides music, so Im unsure.
the programs I should have on the infected pc would be:
hIjack this
ccCleaner
S&D spybot
SAS
MBAM---the only one on infected pc(-unable to open)
My question is are these easy to burn to a disc and
transfer or do I need a flashdrive?
Thanks for your help.
IP logged
Quantos
Guru



Thanked: 158
Posts: 4,041

Experience: Experienced
OS: Windows Vista


Union Proud IW 720

Iron Workers Local 720 1 1
« Reply #3 on: November 06, 2009, 03:00:50 PM »

Burning them to a CD-ROM would be your best bet, and yes, it's fairly easy to do.
You could use a flash drive as well, but I would be leary about spreading the virus around that way.  I don't know how your flash drives write protect works.
IP logged

"Ah the agony, ah the shame, making one man's privates - public for a game..."  Mel Brooks
SuperDave
Malware Removal Specialist
Moderator
Prodigy



Thanked: 571
Posts: 6,550

Certifications: List
Experience: Experienced
OS: Windows XP



« Reply #4 on: November 08, 2009, 04:09:20 PM »

Hello jupiter2000 and welcome to Computer Hope Forum. My name is Superdave but you can just call me SD. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs. The first thing you should do is go to this link to create a Rescue CD or to this site to create a Rescue USB. Carefully follow all the instructions for whichever method you choose. I know that you said that you already burned a rescue CD but I want to ensure that you follow all the steps correctly to activate your computer.
IP logged

AMD Athlon XP 1900+ 1.47 GHz  3 GB Ram Windows XP  Home with SP3, MicroSoft Security Essentials, Spybot S&D. SuperAntiSpyware  and Threatfire with Comodo Firewall & Windows Defender
jupiter2000
Topic Starter
Rookie



Posts: 12


« Reply #5 on: November 10, 2009, 10:28:45 PM »

hey SD,
 Thanks so much for taking on this challenge!
I performed the Avira rescue cd; it found 275 records, suspect files 0, warnings 10.
there was nothing to remove as all of them were renamed.
When i ran the Avira cd, these two rat-like creatures appeared in the top left
corner, should I be concerned about them?
Windows booted normally but I cant get into add/remove programs or system(info)
I get  application not found c:/windows/system/rundill32.exe. when I open IE, it asks me what program to run it with, never experianced that.

I found out that their TrendMicro av is expired, I'd like to uninstall but Im likely to get the "app not found" msg and wonder what to do b4 I follow the malware tutorial on first post.
Sorry for the delay as I dont have 24hr access to this infected PC.
thanks again for all your guidance!
Jupiter
IP logged
SuperDave
Malware Removal Specialist
Moderator
Prodigy



Thanked: 571
Posts: 6,550

Certifications: List
Experience: Experienced
OS: Windows XP



« Reply #6 on: November 11, 2009, 01:28:58 PM »

Hello Jupiter2000. Don't fret about all that other stuff. My main concern at the moment is whether or not you can run the SAS(SuperAntiSpyware, MBAM(Malwarebytes' Anti-malware) and HJT(HijackThis) scans. If they won't run, try renaming the executable file for each program and then see if it will run.
IP logged

AMD Athlon XP 1900+ 1.47 GHz  3 GB Ram Windows XP  Home with SP3, MicroSoft Security Essentials, Spybot S&D. SuperAntiSpyware  and Threatfire with Comodo Firewall & Windows Defender
Pages: [1] - (Top) Print 
Home / Software / Computer viruses and spyware / Window Police Pro has taken over, please HELP! « previous next »
 


Login with username, password and session length

Old Forum Search | Forum Rules
Copyright © 2010 Computer Hope ® All rights reserved.
Powered by SMF 2.0 RC3 | SMF © 2006–2010, Simple Machines LLC
Page created in 0.113 seconds with 21 queries.