Can't Run Programs, Even Ones Off USB

Solved/Closed
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010 - Nov 4, 2010 at 04:32 PM
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010 - Nov 9, 2010 at 06:33 PM
Hello,
I downloaded a file off the internet which immediately shut down my computer and restarted it. On restart, none of my programs will run. They show up on the task manager for a second or two then go away. Trying to run Malwarebytes, AVG, or system restore won't work and I tried running Superantispyware off my USB in Safe Mode and it wouldn't work either!
Someone please help!!



Related:

9 responses

Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164
Nov 4, 2010 at 04:56 PM
Greetings,

I was just about to go offline when I noticed your post.

I can help you but not untill morning, like in 12 hours.

If you are patient enough...

To fix the problem, I must have a Hyjacthis log.

http://free.antivirus.com/hijackthis/

Please download, install and request a scan and save a log. Copy the log and post it here.

Regards
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 4, 2010 at 05:46 PM
I tried to install but it said "Installation directory must be on a local drive" when i try to install it anywhere. It's on my C drive so idk what's up
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 4, 2010 at 09:10 PM
Also, tried to reinstall windows 7 and it didn't work, twice.
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164
Nov 5, 2010 at 04:36 AM
Greetings Dugie

I have two possible solutions for this beast. Today we will try the first,

A malicious process may be running so we will attempt to stop it before we try to clean the computer for residual poison.

Please follow the following procedure carefully and to the letter.

You must kill the evil processes which the virus is presently running amd preventing you from running any antivirus. If you don't it will keep reproducing the files for ever.

To kill the processes:

1. Download to your desktop and run Rogue Kill:

https://download.bleepingcomputer.com/grinler/rkill.com

2. You should now see a window that shows all of your desktop icons, including the rkill.com program.

3. Double-click on the rkill.com in order to automatically attempt to stop any processes associated with programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step.

If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by the Horse when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate the processes . So, please try running Rkill until malware is no longer running.

As a matter of a fact, if you get messages, it is a sign that the virus is agonizing with excrutiating pain, so you can just grin while it is suffering!:)))

Please, DO NOT REBOOT your computer or the processes will come back to haunt you!

Download to your desktop Malwarebyte.

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/

Once on your desktop, we must still outwit the virus.

Right click on the MBAM icon and click on rename. Rename it kioskea.exe.

Install Malwarebyte and launch it. From the second tab, update it.

Pretty please, request a FULL system scan which should take more than hour. Once the scan is finish, delete all of item that were found.

Let me know
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 5, 2010 at 02:25 PM
When i try to run rkill all that happens is a black box pops up then goes away.
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164
Nov 5, 2010 at 04:46 PM
Dugie,

You are in a big mess!

So be it, at your own risk and peril!

I shall prescribe to you a very powerfull antidote that is able to kill and send any virus to the glue factory. It is of very last resort and should not be abused of, as matter of a fact, once you have used it, I suggest you delete it from your system.

To keep your system safe, you must follow the instructions hereunder to the letter:

1. Download Combofix to your desktop.

http://www.combofix.org/download.php

2.Close all open Windows including this one.

Close or disable all running Antivirus, Antispyware, and Firewall programs as they may interfere with the proper running of ComboFix.

3. Double click on the ComboFix icon.

Windows is issuing this prompt because ComboFix does not have a digital signature. This is perfectly normal and safe and you can click on the Run button to continue.

4. Accept the disclaimer and the recovery

5.You should now press the Yes button to continue. If at any time during the Recovery Console installation you receive a message stating that it failed to install, please allow ComboFix to continue with the scan of your computer.

ComboFix will disconnect your computer from the Internet, so do not be surprised or concerned if you receive any warnings stating that you are no longer on the Internet. When ComboFix has finished it will automatically restore your Internet connection.

While the program is scanning your computer, it will change your clock format, so do not be concerned when you see this happen. When ComboFix is finished it will restore your clock settings to their previous settings.

If you see your Windows desktop disappear, do not worry. This is normal and ComboFix will restore your desktop before it is finished. Eventually you will see a new screen that states the program is almost finished and telling you the programs log file, or report, will be located at C:\ComboFix.txt.

During the process, please do not mouse click nor must you tap on the keyboard. Let the tool run.

Once you are done, report to me on how your system is behaving.

Good luck

Ambucias
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 6, 2010 at 12:39 AM
It won't even open just like any other program that is an application... I don't know what to do i think im screwed
0

Didn't find the answer you are looking for?

Ask a question
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164
Nov 6, 2010 at 05:10 AM
Dug,

Can you try to perform a non destructive restore by going back to a restore date before the problem occured?
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 6, 2010 at 11:14 AM
nope when i try to system restore a box pops up stating that the Administrator has turned it off and to contact him if i want to turn it on. Only thing is, I AM the administrator and never have turned it off
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164
Nov 6, 2010 at 03:41 PM
Okay Dug,

Believe it or not now that the computer says that you don't have admin rights, we are near a solution.

In this perticular instance, because am not that familiar with Win7, I will ask my venerated colleague, jack4all to look over your situation and it should take long, he will reply to you directly.

In the meantime, could you please tell us all about the file you downloaded.

Catch you later
0
jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020
Nov 6, 2010 at 04:40 PM
Hello,

First thanks to "Ambucias".

Try this 1

1) Click on the below link and dowload the HijackThis

http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

No need of installation. Just double-click on it.

If you are having problem in running that file since its exe, then

Click on Start --> In search box, type control folders and press Enter.

"Folder Options" window will be opened --> Click on "View" tab --> Scroll down

and uncheck the check box "Hide file extensions for known file types" and click on

OK.

Now change the HiJackThis file extension from exe to com --> Click on "Yes" when

it asks you for confirmation.

Then double-click on HiJackThis, request a scan and save a log. Copy the log and

post it here.

Note : If you having problem in running that file in normal mode then try in safe

mode.

2) If you still having problem with it then try BitDefender Online Scanner.

Click on the below link and follow the instructions.

https://www.bitdefender.com/toolbox/

Good Luck.
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 6, 2010 at 06:22 PM
I have tried running Hijackthis and it doesn't work. I also have not been able to open a web browser. I have been on this site through my laptop. The file i downloaded was through keygenguru.com which i found out has a malware virus associated with it but not that bad of one like whats happening to my computer. I wonder if it wasn't my operating system failing
0
jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020
Nov 7, 2010 at 09:03 AM
Hello,
Try this 1
Click on the below link and download the Avira AntiVir Rescue System
http://www.avira.com/en/support-download-avira-antivir-rescue-system
Download the ISO file (Second File) --> Burn it to the CD --> Place the CD in the drive --> Set your first boot device as CD\DVD-Drive to boot from the CD--> Follow the instructions --> Scan your PC.
Note: If your windows logo appears then restart your PC so that it can boot from the cd.
When Avira AntiVir Rescue System window appears ---> At the bottom left you can click on the flag to change the language.
Good Luck.
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 8, 2010 at 11:53 AM
I found the Windows Malicious Software Removal Tool on my computer and tried to run it and it actually started up! I ran a full scan which took hours and hours but when it finished it didn't find anything. Does that mean there is no virus?
0
jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020
Nov 8, 2010 at 02:32 PM
Hello,
If the database is not updated then there is a chance for failing to detect it. But no antivirus will give us 100% full protection \ detection rate.
Did you tried "Avira AntiVir Rescue System". Follow the above instructions.
Good Luck.
0
jack4rall Posts 6428 Registration date Sunday June 6, 2010 Status Moderator Last seen July 16, 2020
Nov 8, 2010 at 01:56 AM
Hello,
Follow the below instructions by downloading avira rescue cd
Good Luck.
0
dugie77 Posts 9 Registration date Thursday November 4, 2010 Status Member Last seen November 9, 2010
Nov 9, 2010 at 06:33 PM
I fixed it. It was the OS that failed and I had to reinstall vista and then win 7 again. But it works now. Thanks to all of you guys for helping me and taking the time to respond!! I really appriciate it!
0