***HUGE VIRUS PROBLEM***

[xer 21]

ok, so, earlier this week, i left my computer on overnight (as i usually do) and came back in the morning to find 50 new IE windows open to random shopping and ad websites. i closed them all, and noticed that there was a new icon on my desktop, "a.exe" and knew instinctively that that was a virus. i searched it online, found out what it was after my spyware scanners picked up nothing and found the only way to delete it was to use the command prompt. so i force deleted it and got no new windows opening up, except every 10 minutes an error message wuld pop up from windows saying "host process rundll32.exe has stopped working" and it would show up in pairs. in the task manager, no such process existed. anyways, after a couple days of this, i ran spybot search and destroy as well as iobit security, did full scans, and shut my computer down with them set to run when i turned my computer back on. they ran, and now im onto my current problem. now, pretty much every other time i click a link, one of three things happens. one, most rarely it actually follows the link. 2, it will go to one of those bogus "you have a virus, scan your pc now" sites and gives me those popup "your pc is severly infected" warnings. the third occurrence, and the one that happens most often, is that the link redircts to a random site for everything from food, to airsoft to, ironically enough, anti-virus program reviews. luckily, no porn. but while it loads, i notice the url changes to either providefeed.com....... or the feedwater.com...... both sites draw a blank in goodle search. spybot and iobit have found nothing and are fully updated. any ideas? i cant do anything online right now.

[JWarrior]

Have you tried Malwarebytes, (a very good free anti-malware program), or Hijackthis? Malwarebytes has saved me from re-formatting my hard drive in the past. Hijackthis requires that you copy and paste a log file to a forum. Google it, and you'll find several forums that can help you with that.

Malwarebytes link:
http://www.malwarebytes.org/mbam-download.php

Hijackthis link:
http://download.cnet.com/Trend-Micro-Hi ... 79544.html

Hope this helps.

[xer 21]

Have you tried Malwarebytes, (a very good free anti-malware program), or Hijackthis? Malwarebytes has saved me from re-formatting my hard drive in the past. Hijackthis requires that you copy and paste a log file to a forum. Google it, and you'll find several forums that can help you with that.

Malwarebytes link:
http://www.malwarebytes.org/mbam-download.php

Hijackthis link:
http://download.cnet.com/Trend-Micro-Hi ... 79544.html

Hope this helps.

ive used hijcak this, its a very powerful tool.


but i cant get any of these on my computer because every time i click a link, i get redircted, so i cant download that or post a log from hijackthis (which icurrently have on my comp)

thanks for the suggestion. i suspect that this is entirely new malware as there is nothing on the internet about it besides this and a yahoo question that was posted 9 hours ago and is currently unanswered.

[JWarrior]

Ah, well, I was hoping you had access to another computer. That is why I have no fewer than 3 at home at all times. The malwarebytes, if you can download it at someone elses machine and access it via a thumb drive, would probably fix your issue, but then again, you'd have to get updates, and that might be blocked by the malware.

[xer 21]

Ah, well, I was hoping you had access to another computer. That is why I have no fewer than 3 at home at all times. The malwarebytes, if you can download it at someone elses machine and access it via a thumb drive, would probably fix your issue, but then again, you'd have to get updates, and that might be blocked by the malware.

i have access to another computer, the one im using now, just no way to check my email without being redirected on the bad computer and no flash drive to transfer a log to this computer.

[xer 21]

update!


finally found a link to a computer forum that reviews hijackthis logfiles that wasnt bugged, and got it posted. glad i kept that program from the last time though, it really works. it scares me though, knowing i might accidentally disable windows or something.

[xer 21]

Update:

tried malwarebytes, hasnt fixed the problem. still waiting on a response to my posted hiackthis logfile on another forum.

[madeinhawaii]

http://www.bleepingcomputer.com/combofi ... e-combofix

Best cure for malware.

[mikoton]

Hello! I don't trust malware becouse I tried it and it didn't fix my problem. I tried a lot of other programs and I use an old version of kaspersky that I like more then all these. I found it there internet security 7 I suggest you to use it

[xer 21]

wow major necro just for an ad.

[madeinhawaii]

Xer...

boot in safemode with network.. see if you can download and run malwarebytes..
If not.. go to

[url]http://www.bleepingcomputer.com/combofi ... mbofix/url]

Click on the using combofix link... click to download and select 'RUN'

NOTE: Never download combofix from anywhere but bleepingcomputer.com.

[xer 21]

Xer...

boot in safemode with network.. see if you can download and run malwarebytes..
If not.. go to

[url]http://www.bleepingcomputer.com/combofi ... mbofix/url]

Click on the using combofix link... click to download and select 'RUN'

NOTE: Never download combofix from anywhere but bleepingcomputer.com.

oh no dude, my pc is fine. this thread is from last year. some guy dug it up so he could post an ad.
in any case, i already have combo fix and malwarebytes from this very incident.

[madeinhawaii]

Xer...

boot in safemode with network.. see if you can download and run malwarebytes..
If not.. go to

[url]http://www.bleepingcomputer.com/combofi ... mbofix/url]

Click on the using combofix link... click to download and select 'RUN'

NOTE: Never download combofix from anywhere but bleepingcomputer.com.

oh no dude, my pc is fine. this thread is from last year. some guy dug it up so he could post an ad.
in any case, i already have combo fix and malwarebytes from this very incident.

And here I thought you did it again... LOL.. good to know that all is good..