Can't Run Programs, Even Ones Off USB Solved/Closed

Question

Hello, 
I downloaded a file off the internet which immediately shut down my computer and restarted it. On restart, none of my programs will run. They show up on the task manager for a second or two then go away. Trying to run Malwarebytes, AVG, or system restore won't work and I tried running Superantispyware off my USB in Safe Mode and it wouldn't work either!
Someone please help!!



Configuration: Windows 7 / Firefox 3.6.12

Ambucias · Answer

Greetings,

I was just about to go offline when I noticed your post.

I can help you but not untill morning, like in 12 hours.

If you are patient enough...

To fix the problem, I must have a Hyjacthis log.

http://free.antivirus.com/hijackthis/

Please download, install and request a scan and save a log.  Copy the log and post it here.

Regards

dugie77 · Answer

Also, tried to reinstall windows 7 and it didn't work, twice.

Ambucias · Answer

Greetings Dugie

I have two possible solutions for this beast.  Today we will try the first,

A malicious process may be running so we will attempt to stop it before we try to clean the computer for residual poison.

Please follow the following procedure carefully and to the letter. 

You must kill the evil processes which the virus is presently running amd preventing you from running any antivirus. If you don't it will keep reproducing the files for ever. 

To kill the processes: 

1. Download to your desktop and run Rogue Kill: 

https://download.bleepingcomputer.com/grinler/rkill.com 

2. You should now see a window that shows all of your desktop icons, including the rkill.com program. 

3. Double-click on the rkill.com in order to automatically attempt to stop any processes associated with programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. 

If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by the Horse when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate the processes . So, please try running Rkill until malware is no longer running. 

As a matter of a fact, if you get messages, it is a sign that the virus is agonizing with excrutiating pain, so you can just grin while it is suffering!:)))

Please, DO NOT REBOOT your computer or the processes will come back to haunt you! 

Download to your desktop Malwarebyte. 

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/ 

Once on your desktop, we must still outwit the virus. 

Right click on the MBAM icon and click on rename. Rename it kioskea.exe. 

Install Malwarebyte and launch it. From the second tab, update it. 

Pretty please, request a FULL system scan which should take more than hour. Once the scan is finish, delete all of item that were found. 

Let me know

Ambucias · Answer

Dugie,

You are in a big mess!

So be it, at your own risk and peril!

I shall prescribe to you a very powerfull antidote that is able to kill and send any virus to the glue factory. It is of very last resort and should not be abused of, as matter of a fact, once you have used it, I suggest you delete it from your system. 

To keep your system safe, you must follow the instructions hereunder to the letter: 

1. Download Combofix to your desktop. 

http://www.combofix.org/download.php 

2.Close all open Windows including this one. 

Close or disable all running Antivirus, Antispyware, and Firewall programs as they may interfere with the proper running of ComboFix. 

3. Double click on the ComboFix icon. 

Windows is issuing this prompt because ComboFix does not have a digital signature. This is perfectly normal and safe and you can click on the Run button to continue. 

4. Accept the disclaimer and the recovery 

5.You should now press the Yes button to continue. If at any time during the Recovery Console installation you receive a message stating that it failed to install, please allow ComboFix to continue with the scan of your computer. 

ComboFix will disconnect your computer from the Internet, so do not be surprised or concerned if you receive any warnings stating that you are no longer on the Internet. When ComboFix has finished it will automatically restore your Internet connection. 

While the program is scanning your computer, it will change your clock format, so do not be concerned when you see this happen. When ComboFix is finished it will restore your clock settings to their previous settings. 

If you see your Windows desktop disappear, do not worry. This is normal and ComboFix will restore your desktop before it is finished. Eventually you will see a new screen that states the program is almost finished and telling you the programs log file, or report, will be located at C:\ComboFix.txt. 

During the process, please do not mouse click nor must you tap on the keyboard.  Let the tool run.

Once you are done, report to me on how your system is behaving. 

Good luck 

Ambucias

Ambucias · Answer

Dug,

Can you try to perform a non destructive restore by going back to a restore date before the problem occured?

Ambucias · Answer

Okay Dug,

Believe it or not now that the computer says that you don't have admin rights, we are near a solution.

In this perticular instance, because am not that familiar with Win7, I will ask my venerated colleague, jack4all to look over your situation and it should take long, he will reply to you directly.

In the meantime, could you please tell us all about the file you downloaded.

Catch you later

jack4rall · Answer

Hello, 

First thanks to "Ambucias". 

Try this 1

1) Click on the below link and dowload the HijackThis 

http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe 

No need of installation. Just double-click on it. 

If you are having problem in running that file since its exe, then  

Click on Start --> In search box, type control folders and press Enter. 

"Folder Options" window will be opened --> Click on "View" tab --> Scroll down  

and uncheck the check box "Hide file extensions for known file types" and click on 

OK. 

Now change the HiJackThis file extension from exe to com --> Click on "Yes" when  

it asks you for confirmation. 

Then double-click on  HiJackThis, request a scan and save a log. Copy the log and  

post it here.  

Note : If you having problem in running that file in normal mode then try in safe  

mode. 

2) If you still having problem with it then try BitDefender Online Scanner. 

Click on the below link and follow the instructions. 

https://www.bitdefender.com/toolbox/ 

Good Luck.

jack4rall · Answer

Hello, 
Follow the below instructions by downloading  avira rescue cd  
Good Luck.

dugie77 · Answer

I fixed it. It was the OS that failed and I had to reinstall vista and then win 7 again. But it works now. Thanks to all of you guys for helping me and taking the time to respond!! I really appriciate it!

Can't Run Programs, Even Ones Off USB

9 responses

Subscribe To Our Newsletter!