Computer Hope

Software => Computer viruses and spyware => Topic started by: AyBooBo on June 12, 2010, 09:15:53 AM

Title: Big problem please help!
Post by: AyBooBo on June 12, 2010, 09:15:53 AM

My computer recently got infected by a virus or something and it installed a fake antivirus software on my computer as well as porn links on my desktop on my account. I tried deleting the file, but the next time I logged in it would be there again. The virus has now spread to the other accounts on my computer and will sometimes not let me access a program or file, saying that it is corrupt. As of yesterday, when I started up the computer and clicked on any of the accounts, it loads but then the screen turns black and only shows the mouse pointer. the only way to exit the account is by shutting off the computer or waiting for the battery to die. I am unable to do anything on that computer right now.

I've tried multiple times to get my dad to fix this, since he can usually take care of things like this, but he takes too long to work on it and I need it fixed as soon as possible. Please help!

Title: Re: Big problem please help!
Post by: Dr Jay on June 12, 2010, 02:06:59 PM

Hello, and welcome to Computer Hope.

Please note the following information about the malware forum:

• Only the Malware Specialist Team is allowed to give advice on removing malware from your computer.
  
• From this point on, please do not make any more changes to your computer; such as install/uninstall programs, use special fix tools, delete files, edit the registry, etc. - unless advised by the staff I noted above.
  
• Please do not attach logs or post them in Quote/Code boxes unless requested.
  
• Please do not ask for help elsewhere (in this site or other sites). Doing so can result in system changes, which may not show up in the logs you post.
• If you have already asked for help somewhere, please post the link to the topic you were helped.
• We try our best to reply quickly, but for any reason we do not reply in two days, reply to this topic with the word BUMP
  
• Lastly, keep in mind that we are volunteers, so you do not have to pay for malware removal. Persist in this topic until its close, and your computer is declared clean.

We are going to be using a Windows Recovery Environment to help disinfect the system so it may boot again.

Download the OTLPE Standard REATOGO Windows Recovery Environment.

• Place a blank CD-R disc in to your CD burning drive.
• Download OTLPEStd.exe (http://oldtimer.geekstogo.com/OTLPEStd.exe) and double-click on it to burn to a CD using ISO Burner.
• Reboot your system using the boot CD you just created.

Note : If you do not know how to set your computer to boot from CD follow the steps here (http://www.hiren.info/pages/bios-boot-cdrom)

• Your system should now display a REATOGO-X-PE desktop.
• Double-click on the OTLPE icon.
  
• When asked "Do you wish to load the remote registry", select Yes
  
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  
• OTL should now start. Change the following settings
  • Change Drivers to Non-Microsoft
    
  • Press Run Scan to start the scan.
    
  • When finished, the file will be saved  in drive C:\_OTL\MovedFiles
    
  • Copy this file to your USB drive if you do not have internet connection on this system
  • Please post the contents of the OTL.txt file in your reply.