Insert BS here A place to discuss anything you want

Got a virus

Thread Tools
 
Search this Thread
 
Old 10-28-2009, 09:16 AM
  #1  
Elite Member
Thread Starter
iTrader: (46)
 
Stein's Avatar
 
Join Date: Dec 2007
Location: Nebraska
Posts: 4,729
Total Cats: 166
Default Got a virus

Got a new virus the other day. It is causing popups on Explorer and Chrome. I tried to run my Malwarebytes but it wouldn't run. The virus apparenly deletes the .exe files for antivirus software.

Tried to reload it and it still can't find the .exe file.

Loaded Spybot S&D, ran it and it found several trojans, along with several files that had substituted something else for the .exe files. I thought all was good but still can't load a freshly downloaded copy of Malwarebytes. Every time I load it and try to run it it says mbam.exe (the .exe for malwarebytes) not found. Thoughts? Other malware cleaners to try?
Stein is offline  
Old 10-28-2009, 09:19 AM
  #2  
Elite Member
iTrader: (41)
 
rharris19's Avatar
 
Join Date: Jan 2006
Location: Seabrook, TX
Posts: 2,417
Total Cats: 20
Default

What about a system restore? Have you tried to restore it back to an earlier date? This worked for me when I got a virus recently. It is in system tools under accessories.
rharris19 is offline  
Old 10-28-2009, 09:19 AM
  #3  
Senior Member
iTrader: (6)
 
tyson87's Avatar
 
Join Date: Aug 2008
Location: West Palm Beach, FL
Posts: 1,020
Total Cats: 1
Default

avast!
tyson87 is offline  
Old 10-28-2009, 09:20 AM
  #4  
Senior Member
iTrader: (6)
 
tyson87's Avatar
 
Join Date: Aug 2008
Location: West Palm Beach, FL
Posts: 1,020
Total Cats: 1
Default

try renaming the file also. i had a problem with one that had a database of all the anti-virus software names saved so it knew what to delete
tyson87 is offline  
Old 10-28-2009, 09:26 AM
  #5  
Senior Member
iTrader: (6)
 
TrickerZ's Avatar
 
Join Date: Jul 2007
Location: Cocoa Beach, FL
Posts: 850
Total Cats: 16
Default

Install Linux. Problem solved forever.
TrickerZ is offline  
Old 10-28-2009, 09:26 AM
  #6  
Tour de Franzia
iTrader: (6)
 
hustler's Avatar
 
Join Date: Jun 2006
Location: Republic of Dallas
Posts: 29,085
Total Cats: 375
Default

I had this and had to get a nerd friend to fix it. It was a serious pain in the as. I had b.exe
hustler is offline  
Old 10-28-2009, 09:30 AM
  #7  
Ben
Supporting Vendor
iTrader: (33)
 
Ben's Avatar
 
Join Date: Jul 2006
Location: atlanta-ish
Posts: 12,659
Total Cats: 134
Default

Can you save the malwarebytes exe under a different name and try again?
__________________
Chief of Floor Sweeping, DIYAutoTune.com & AMP EFI
Crew Chief, Car Owner & Least Valuable Driver, HongNorrthRacing

91 Turbo | 10AE Turbo | 01 Track Rat | #323 Mazda Champcar

Originally Posted by concealer404
Buy an MSPNP Pro, you'll feel better.
Ben is offline  
Old 10-28-2009, 09:30 AM
  #8  
Boost Czar
iTrader: (62)
 
Braineack's Avatar
 
Join Date: May 2005
Location: Chantilly, VA
Posts: 79,490
Total Cats: 4,079
Default

try safe mode.
Braineack is offline  
Old 10-28-2009, 09:31 AM
  #9  
Senior Member
iTrader: (6)
 
tyson87's Avatar
 
Join Date: Aug 2008
Location: West Palm Beach, FL
Posts: 1,020
Total Cats: 1
Default

im waiting for some ------ to come in and say, "you know, if you had a Mac this would have never happened."
tyson87 is offline  
Old 10-28-2009, 09:35 AM
  #10  
Boost Czar
iTrader: (62)
 
Braineack's Avatar
 
Join Date: May 2005
Location: Chantilly, VA
Posts: 79,490
Total Cats: 4,079
Default

and what are the pop ups? google is awesome for removing this crap, you need to stop the instance of the virus running and get at it.

a mac is like the MSM of miatas.
Braineack is offline  
Old 10-28-2009, 09:36 AM
  #11  
Elite Member
iTrader: (30)
 
levnubhin's Avatar
 
Join Date: Aug 2007
Location: Va Beach
Posts: 7,329
Total Cats: 12
Default

wear a condom next time.
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote
levnubhin is offline  
Old 10-28-2009, 09:42 AM
  #12  
Senior Member
iTrader: (6)
 
TrickerZ's Avatar
 
Join Date: Jul 2007
Location: Cocoa Beach, FL
Posts: 850
Total Cats: 16
Default

In all seriousness, it's a pretty easy fix if you know what you're doing. Most likely it runs from a startup in the registry. You can usually just wipe out the registry entry from safe mode and then install your virus scanner and have it remove all the files. Your best bet is to use an offline scanner that uses a boot disk, though. That's the simplest method. Second easiest is probably to use Ubuntu or Knoppix Live CD and run the Clam antivirus from there. It's a pretty good free antivirus that works in Linux. You also have the option of doing a repair installation of windows by booting from the windows cd. Problems like this are why I just keep all my files on a separate partition or drive so I can just format windows when it pisses me off and not lose anything.
TrickerZ is offline  
Old 10-28-2009, 09:47 AM
  #13  
Elite Member
iTrader: (10)
 
9671111's Avatar
 
Join Date: Jan 2008
Posts: 1,582
Total Cats: 18
Default

Hijackthis.
9671111 is offline  
Old 10-28-2009, 09:52 AM
  #14  
Senior Member
iTrader: (6)
 
tyson87's Avatar
 
Join Date: Aug 2008
Location: West Palm Beach, FL
Posts: 1,020
Total Cats: 1
Default

hijackthis only creeates a log for us to look at and tell him what to do.
tyson87 is offline  
Old 10-28-2009, 09:54 AM
  #15  
Senior Member
iTrader: (6)
 
tyson87's Avatar
 
Join Date: Aug 2008
Location: West Palm Beach, FL
Posts: 1,020
Total Cats: 1
Default

at my house and my store i use

zone alarm firewall
avast antivirus
superantispyware

all of those are free too.
tyson87 is offline  
Old 10-28-2009, 10:07 AM
  #16  
Elite Member
Thread Starter
iTrader: (46)
 
Stein's Avatar
 
Join Date: Dec 2007
Location: Nebraska
Posts: 4,729
Total Cats: 166
Default

I'm not ignoring you, I'm just trying things. I have tried to reload Malwarebytes to rename mbam.exe to mam.exe but whenever I load it and go in to rename it, it's missing completely. I can't open the setup file to rename it before loading. It only lets me install it.

Going to try to load avast now.
Stein is offline  
Old 10-28-2009, 10:10 AM
  #17  
Boost Czar
iTrader: (62)
 
Braineack's Avatar
 
Join Date: May 2005
Location: Chantilly, VA
Posts: 79,490
Total Cats: 4,079
Default

Malwarebytes is great, i used it yesterday when I got the fake security center pop-up malware thing.
Braineack is offline  
Old 10-28-2009, 10:17 AM
  #18  
y8s
2 Props,3 Dildos,& 1 Cat
iTrader: (8)
 
y8s's Avatar
 
Join Date: Jun 2005
Location: Fake Virginia
Posts: 19,338
Total Cats: 573
Default

live cd with antivirus!!
y8s is offline  
Old 10-28-2009, 10:17 AM
  #19  
Senior Member
iTrader: (6)
 
tyson87's Avatar
 
Join Date: Aug 2008
Location: West Palm Beach, FL
Posts: 1,020
Total Cats: 1
Default

oh yeah i used that too, but for routine i use the above stuff.
tyson87 is offline  
Old 10-28-2009, 10:18 AM
  #20  
Senior Member
iTrader: (6)
 
tyson87's Avatar
 
Join Date: Aug 2008
Location: West Palm Beach, FL
Posts: 1,020
Total Cats: 1
Default

Originally Posted by Braineack
a mac is like the MSM of miatas.
and i bet u like Norton too...
tyson87 is offline  


Quick Reply: Got a virus



All times are GMT -4. The time now is 07:43 PM.