Register - Login
Views: 99828268
 Main - Memberlist - Active users - Calendar - Wiki - IRC Chat - Online users
Ranks - Rules/FAQ - Stats - Latest Posts - Color Chart - Smilies 		05-03-22 08:38:14 PM
Jul - Computers and Technology - Ugh. New poll - New thread - New reply
Next newer thread | Next older thread
ReiNi
さよなら＊へヴン
Level: 124


Posts: 3592/4444
EXP: 21770331
For next: 66270

Since: 07-21-07


Since last post: 6.7 years
Last activity: 3.3 years
Posted on 08-24-11 10:20:45 PM Link | Quote
Request you!
Long story short: Connect old drive. Copy file. Disconnect. Run exe. All fine.

A day passes. Mysterious error messages and number-named processes show up.
Error with a proccess I can't remember. Computer restarts immediately.

Takes long to boot Windows, half of the start up programs are ignored. A bunch of suspiciously named processes show up in task manager.

Lots of error messages show up. All of the nature of programs not being able to run properly and shutting down.

The first thing I did was do a system restore, though it didn't help.

Windows in general is bugged up. The taskbar is pretty much nonfunctional (the keyboard language section seems to have taken over all the space, minimized programs are lost in a void so are the shortcuts), no networks show up despite being able to use the internet. The sound hardware went unrecognized AGAIN. And other fun things.

I should probably just run HijackThis and post a log, but this machine is full of trash.

Note Malwarebytes won't run.

____________________
Gabu

Star Mario
Placeholder Ikachan until :effort: is found
Level: 172


Posts: 6790/9981
EXP: 67993542
For next: 108692

Since: 08-10-09

Pronouns: they/them, she/her
From: Santa Cruisin' USA

Since last post: 57 days
Last activity: 4 days
Posted on 08-25-11 02:45:44 AM Link | Quote
When you say MalwareBytes won't run do you mean you get a dialog box asking what program to run the program in, completely unable to due to the hinjinks, or does it fail to start at all? My dad taught me a little trick if it's that last one by installing a fresh copy of MalwareBytes onto a USB key from a non-bugged computer, then change the name of the mbam.exe file to something else entirely.

If it's the first one though, and you get that with every program you try, then the registry file for .exe programs has fucked up and you'll need to merge a new copy into your computer.

If it's the middle one... well... the best idea I can come up with is to reinstall Windows and pray for the best, but I'm sure there's a less invasive way than that.

____________________
paulguy

Green Birdo
Level: 93


Posts: 1771/2294
EXP: 8032792
For next: 20018

Since: 09-14-07

From: Buffalo, NY

Since last post: 9.7 years
Last activity: 9.7 years
Posted on 08-25-11 04:41:05 AM Link | Quote
Paulguy's Post configuration
Heh when windows gets that bad you may as well reinstall it. It'll likely never be the same again, even if stuff starts working OK. Also, if you're backing up your stuff, you should probably run a scan of some sort. The .exe and Office formats are often infected, and you'd end up back to square 1 if you load one of them on a fresh windows install if they got infected. Might also want to zero out the master boot record, too, if you choose to reinstall. That seems to be a popular new old vector.

____________________
ReiNi
さよなら＊へヴン
Level: 124


Posts: 3593/4444
EXP: 21770331
For next: 66270

Since: 07-21-07


Since last post: 6.7 years
Last activity: 3.3 years
Posted on 08-26-11 03:59:40 AM Link | Quote
Request you!
I'd just format and reinstall if I could, but the CD drive is physically broken. Also the backups I took are infected, so even if I do that I need to figure a way to clean them too. (Funnily enough, I got this from a previous backup that was infected as well! That means is an old virus)

Many programs are completelly unable to run due to the times, yeah. So there's no helping it. Even if I did desinfect the computer it many registry entries are messed with and windows is all corrupted, so I'd have to repair a lot of functionality. (I miss having a taskbar, or firewall, or desktop, or seeing hidden and system folders and moving or deleting files without tedious workarounds involving IrfanView)

I managed to kill plenty of the stuff though, including Virut. Thanks to some creative and destructive use of HijackThis that probably did more bad than good. Though that didn't do much as there is a trojan that let everything back in just right now when I connected to the internet, at least now I can actually download proper antivirus and perhaps try redownloading MalwareBytes.

Also at least Winamp recognizes the sound driver, so I am not in a quiet room of insanity.


Anyways, I am going to try to restore this at least to the point I can connect to the internet without flooding the network with porn sites or trashy strolling or whatever this does.

If all else fails, I'll just run combofix and nuke everything. :V

____________________
Gabu

Star Mario
Placeholder Ikachan until :effort: is found
Level: 172


Posts: 6796/9981
EXP: 67993542
For next: 108692

Since: 08-10-09

Pronouns: they/them, she/her
From: Santa Cruisin' USA

Since last post: 57 days
Last activity: 4 days
Posted on 08-26-11 07:07:09 PM (last edited by Gabu at 08-26-11 04:08 PM) Link | Quote
If, after you clean up most of the mess, in Firefox, Google keeps redirecting itself, install and run this program. It helped me when I had a major virus attack and thankfully removed some of the trojans that were attempting to download the viruses I had deleted right back. This is even a newer version that I have as well, so it might be able to fix even more issues.

____________________
paulguy

Green Birdo
Level: 93


Posts: 1774/2294
EXP: 8032792
For next: 20018

Since: 09-14-07

From: Buffalo, NY

Since last post: 9.7 years
Last activity: 9.7 years
Posted on 08-26-11 07:36:06 PM Link | Quote
Paulguy's Post configuration
Also when you're done cleaning crap up you should probably get some CDROM emulation program (dunno what there is for free for windows), mount a windows install CD and run System File Checker. It should repair things to some extent. I can imagine there'll be weirdness due to any screwed up registry crap.

____________________
Rachel Mae

Creature of Chaos
Level: 141


Posts: 4392/5929
EXP: 33605704
For next: 514310

Since: 07-03-07

Pronouns: she/her
From: Foxglen

Since last post: 21 days
Last activity: 13 hours
Posted on 08-26-11 09:51:18 PM Link | Quote
DAEMON Tools Lite is free for personal use. Just don't be alarmed if it puts an oddly-named SCSI device in Device Manager (that's how it tricks Windows into thinking a physical drive is attached).

____________________
Darkdata
Ruins!? ♥
Level: 103


Posts: 2399/2892
EXP: 11446651
For next: 24755

Since: 07-04-07


Since last post: 203 days
Last activity: 11 days
Posted on 08-26-11 10:02:35 PM Link | Quote
You can always install windows using a USB Drive.

Then, as for the back up CD: On your new machine — remove all autoplay functions, copy the back up over to a folder, scan everything.

Also, if you are using AVG, don't. It's falling behind in detection. There are other good free AVs, like Microsoft security Essentials, or Avast, etc.

But yeah, zero out that boot record.

____________________
ReiNi
さよなら＊へヴン
Level: 124


Posts: 3594/4444
EXP: 21770331
For next: 66270

Since: 07-21-07


Since last post: 6.7 years
Last activity: 3.3 years
Posted on 08-29-11 10:26:13 PM Link | Quote
Request you!
well... After combofix doing it's thing, I ended up nuking internet from this... And while a few things work better Windows is still mostly unusable...
So, yeah a reinstall is pretty much the only thing worth it at this point.
I'm not sure if it killed the rootkit and other stuff Avast couldn't, probably I should backup my stuff now again that's cleaner anyways.

As for the infected backup... It's in an external autorunning usb drive, so unless I prevent it from doing so,yeah...

I was thinking in a Linux USB install too, but last time I tried it didn't work... Actually, Im not sure if this thing can even boot from USB, it's quite old.

____________________
Next newer thread | Next older thread
Jul - Computers and Technology - Ugh. New poll - New thread - New reply


Rusted Logic

Acmlmboard - commit 47be4dc [2021-08-23]
©2000-2022 Acmlm, Xkeeper, Kaito Sinclaire, et al.

29 database queries, 2 query cache hits.
Query execution time: 0.085682 seconds
Script execution time: 0.019994 seconds
Total render time: 0.105676 seconds