Okay this is very strange. There was an exe on my desktop that was just there and I never downloaded anything maliciously. The file name had something like “blah blah microsoft office blah blah”. When I clicked it, it disappeared then a firefox window popped up with a weird message. I’ll see if I can copy it when it pops up again. I scanned my entire computer 3 times and nothing shows up. I’m also getting a lot of pop ups as I’m typing this post. How can I get avast to detect it and fix my computer?
I suggest:
- Clean your temporary files.
- Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
- Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
- Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
- Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
- Disable System Restore and then reenable it again.
- Immunize your system with SpywareBlaster or Windows Advanced Care.
- Check if you have insecure applications with Secunia Software Inspector.
Thanks. How do I remove temporary files and Disable System Restore?
Edit: The only one that seems to pick up the problem is that SUPERspyware remover. And when it tries to quaranteen and remove the threats it just freezes and I have to restart the computer and the pop ups just come back even worse.
Edit 2: Okay that MBAM thing keeps restarting my computer everytime I log into my account. I have to use my laptop and I can’t do anything now.
Edit 3: I was able to remove it quickly before it restarted. I’ve tried all of the removal tools and none of them are removing the problem even though some of the tools can detect it.
@d_headshot
try the trial version of PC Tools Spyware Doctor 6.0.0.385. also try to scan in safemode. goodluck!
How do I scan in safe mode?
Edit: I scanned my computer with spyware doctor and it says I need to register to remove the files. Can you please suggest a free program that actually removes the risks?
First update PC Tools Spyware Doctor or whatever malware scanner you want to use.
1.)Click Start> Run…> Type in msconfig
2.)Go to BOOT.INI tab
3.)Put Check on “/SAFEBOOT”
4.)Restart
**After scan uncheck “/SAFEBOOT” to boot normally
I scanned my computer with spyware doctor and it says I need to register to remove the files. Can you please suggest a free program that actually removes the risks?
Sorry about that. :-X if you have an email address we can make it work.
spybot search and destroy also works well in safe mode
download from safernetworking website- watch out for scam look alikes
update before booting into safemode