Computer Hope
Software => Computer viruses and spyware => Topic started by: teamentourage82 on December 20, 2011, 03:05:52 PM
-
Hi,
I have a Sony Vaio VAIO VGN-FW21L laptop, Windows Vistal Home Premium Version 6.0.6002 Service Pack 2 Build 6002, system type X86-based PC, Intel (R) Core(TM)2 dUO cpu T5800 @ 2.00 Ghz, 1994 Mhz, 2 Cores, 2 Logical Processors. BIOS Version American Megatrends Inc R1091Y0, 07/11/2008, sbios vERSION 2.4
Yesterday night I was watching a TV Show in a windows media file (that i had earlier downloaded) when the picture just froze. the computer also froze. I tried ctrl alt del, but nothing happened. After a few minutes, i decide to manually turn off the power (holding the on button). I then restarted the machine - since then I have not be able to use the laptop properly.
On pressing start, it takes a few minutes longer to load up windows. Once loaded, it takes quite a few minutes for all the start up tray items to appear. Then, when I click on any icon program/file etc it basicaly doesnt load. It will become highlighted, then the spinny timer will come up but nothing happens after a few minutes. If i try another file/program again nothing happens-aftr this i can move my mouse around but nothing is clickable (doesnt highlight). I can also no longer go to start...hence restarting with holding the power button.
On restart in safe mode, it does seem to work for a lot longer. I managed to run AVG and the report came back:
AVG 2012 Anti-virus command line scanner
Pogram version 2012 .0.1890, engine 2012.0.2108
Virus database:version 2108/4688 2011-12-18
C:\Boot\BCD Locked file.not tested.
c:\boot\BCD.LOG Locked file. Not tested.
C:\Documents and Settings\ Locked file. Not tested.
C:\pagefilesys Locked file. Note tested.
After running AVG i wasnt able to close the computer down properly as it again appeared to stop responding in safe mode. Again I had to hold power button to close it down. I have tried system restore. I have tried system repair as prompted. I have tried starting in last known good configuration.
I have done a clean boot, and this gives me a few minutes in normal mode, before again the machine just stops responding to any clicks.
I think I may have a virus? I am writing this from another computer as obviously my working time on the other one isnt long.
Please can some one help and bring me some xmas cheer!!!!!
-
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.
1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.
If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
We are going to be using a Windows Recovery Environment to help disinfect the system so it may boot again.
Download the OTLPE Standard REATOGO Windows Recovery Environment. - Place a blank CD-R disc in to your CD burning drive.
- Download OTLPEStd.exe (http://oldtimer.geekstogo.com/OTLPEStd.exe) and double-click on it to burn to a CD using an ISO Burner. One can be found here. (http://iso-burner.com/)
- Reboot your system using the boot CD you just created.
- Note : If you do not know how to set your computer to boot from CD follow the steps here (http://www.hiren.info/pages/bios-boot-cdrom)
- Your system should now display a REATOGO-X-PE desktop.
- Double-click on the OTLPE icon.
- When asked "Do you wish to load the remote registry", select Yes
- When asked "Do you wish to load remote user profile(s) for scanning", select Yes
- Ensure the box "Automatically Load All Remaining Users" is checked and press OK
- OTL should now start. Change the following settings
- Change Drivers to Non-Microsoft
- Press Run Scan to start the scan.
- When finished, the file will be saved in drive C:\_OTL\MovedFiles
- Copy this file to your USB drive if you do not have internet connection on this system
- Please post the contents of the OTL.txt file in your reply.
-
Hi, i downloaded that program to another computer and burned it to disc.
I placed the CD into my laptop, and it started to load up Reatogo, but then...
File iastor70.SY_ caused an unexpected error (4096) at line 3540 in d:\xpsprtm\base\boot\setup\setup.c.
Press any key tocontinue.
Pressing any key then restarts the machine ... :'(
-
it seems to be working ok in safe mode, and i was able to connect to net and run microsoft saftey scanner which picked up two infected files which it deleted. but in normal mode the problem persists ... about 60s secs after Vista has loaded suddenly everything slows until eventually it stops responding to any clicks :'( :'(
-
Please run this in Safe Mode with NetWorking and then try to run it again in Normal mode.
(http://i424.photobucket.com/albums/pp322/digistar/mbamicontw5.gif) Please download Malwarebytes Anti-Malware from here. (http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe)
Double Click mbam-setup.exe to install the application.
- Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select "Perform Full Scan", then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
- Please save the log to a location you will remember.
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy and paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
-
hi dave,
I downloaded the program and installed as instructed in safe mode. When i ran it though it kept freezing, firstly after 9 mins, then after 11 mins.
I waited an hour, but nothing happened. I could tell it had frozen as the desktop clock had frozen too.
I am now unable to get it into safe mode as it keeps freezing as the files are loading up.??
-
right it seems i can go back into safe mode now
-
Save these instructions so you can have access to them while in Safe Mode.
Please click here (http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/) to download AVP Tool by Kaspersky.
- Save it to your desktop.
- Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
- Double click the setup file to run it.
- Click Next to continue.
- Accept the License agreement and click on next.
- It will, by default, install it to your desktop folder. Click Next.
- It will then open a box There will be a tab that says Automatic scan.
- Under Automatic scan make sure these are checked.
- Hidden Startup Objects
- System Memory
- Disk Boot Sectors.
- My Computer.
- Also any other drives (Removable that you may have)
Leave the rest of the settings as they appear as default.
•Then click on Scan at the to right hand Corner.
•It will automatically Neutralize any objects found.
•If some objects are left un-neutralized then click the button that says Neutralize all
•If it says it cannot be neutralized then choose the delete option when prompted.
•After that is done click on the reports button at the bottom and save it to file name it Kas.
•Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
Note: This tool will self uninstall when you close it so please save the log before closing it.
-
again, i have run the above program, but it has just stopped working after approx 10 mins.
I have also tried Microsoft security essential, again a few minutes into the scan it just stops working!
Shall i just save what stuff i can and try and use the recovery discs that I think are around somehwere?
-
i cant find the recovery discs!!!
-
i performed windows defender full scan in safe mode took over 3hrs, and nothing was found. I tried to scan using Microsft Malcious malware remover, but after an hour of scanning, the power just turned off on the laptop.!! gonna try run full scan malwarebytes again (quick scan was clean).