Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: "Your system is infected!" removal  (Read 6461 times)

0 Members and 1 Guest are viewing this topic.

Jedahead

  • Guest
"Your system is infected!" removal
« on: December 25, 2009, 04:57:18 PM »
So last night for some reason my firewall was down and i gained a virus that changed my background to green with a black box in the middle that reads:
                                      "YOUR SYSTEM IS INFECTED!                                                   System has been stopped due to a serious malfunction. Spyware activity has been detected.                                                                                                                       It is recommended to usse spyware removal tool to prevent data loss. Do not use the computer before all spyware removed."

There is also a red circle with a red x in the bottom left corner that has a box that pops up and reads:

"Click here to protect your computer from spyware!
Your computer is infected! Windows has detected an infectetion of spyware! It is recommended to use special antispyware stoolls to precent data loss. Windows will now download and install the most up-to-date antispyware for you."

Also when i try to  change the background, the locks up the properties bar. I took the help given by CBMatt from the following topic http://www.computerhope.com/forum/index.php?topic=87351.0
I got up to the hijackthis  scan and when i look for the file                                       O4 - HKLM\..\Run: [winupdate.exe] C:\WINDOWS\system32\winupdate.exe
all i find that is close to that is:
O4 - HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe

I don't know what to do or if this is the right file i need to get rid of. I'm planning on reformatting the computer, but first i wanted to put everything i wanted onto my new external harddrive but i'm afraid i'll end up putting the virus on there and it will just come back. It would be much appreciated if someone could help me with this.




unlovedwarrior



    Guru

  • someday this name will be known
  • Thanked: 13
    Re: "Your system is infected!" removal
    « Reply #1 on: December 26, 2009, 12:23:15 AM »
    if the issue has not been resolved in the other post pls do not post another topic on the same unresolved problem it will only take longer to fix it and it might confuse poor CBMatt..


    someone plz lock topic

    impact7



      Greenhorn

      Re: "Your system is infected!" removal
      « Reply #2 on: January 01, 2010, 10:52:26 AM »
      I'm having the same problem as jedahead. The topic he posted as reference is unresolved, but it hasn't had a new post since July.
      I've done the preliminary things that are in the post, Read this before requesting malware removal help, by evilfantasy.  Now I've gotten rid of the background, but when I try to pick one of the ones that are provided by microsoft, they're all the same default dark blue background.  The little red circle with an x and the popup that jedahead was talking about is also gone.  I used to have a pop-up come when I started the computer that said something about my system being infected and how I shouldn't use it until the spyware was gone.  That is gone.  I have three accounts on this computer.  We'll call them a, b, and c.  The virus originated from c.  When I tried to open task manager on a or c, it would say that it had been disabled by the administrator (I didn't even go on account b until I had done the preliminary things.)  Now I can get on task manager on account a and b, but it still gives me the same notification for c.  My computer is also running extremely slow and when I open task manager and look at the performance, it's constantly at 100%.  I have attached the three logs from SUPERantispyware, Malwarebytes Anti-Malware, and HijackThis.  I did the SUPERantispyware and malwarebytes scans last night and the HijackThis one prior to posting this comment.  Also, all the scans were done on account a.
      Thanks in advance

      [Saving space, attachment deleted by admin]

      SuperDave

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Thanked: 1020
      • Certifications: List
      • Experience: Expert
      • OS: Windows 10
      Re: "Your system is infected!" removal
      « Reply #3 on: January 01, 2010, 01:49:31 PM »
      impact7. Could you please start a new thread with all this information and I'll have a look at it.
      Windows 8 and Windows 10 dual boot with two SSD's

      spock



        Intermediate

        Thanked: 1
        Re: "Your system is infected!" removal
        « Reply #4 on: January 02, 2010, 07:58:38 AM »
          Someone is trying to install a virus on your computer. There is no way you can exit this window short of a hard shutdown of your computer. I do this as quickly as possible when this comes up (usually followed by an expletive). Then I run a regular virus scan with my computer. It usually occurs when I visit sites I don't know are unsafe.
          One thing that has helped me a lot recently is a download called WOT or Web Of Trust. It gives an indication whether a site is safe or not.
        "It's always something!"-Gilda Radner