i need help real bad!!

[moose72]

I have a Virus more likley more then one.

i cant open any programs
ex: my computer, any of my anti virus programs, e mail, internet.

every now and then i here a weird clickin sound from my speakers.

i cant close or open any programs. it says that the operation has been cancaled due to resitcions in effort in this computer. i cant open the task manger as well..I have to use my mouse the oppiste of what it is really.

any help would be nice, im sorry i cant give a log or any thing, because i cant open any programs.Thank you

[moose72]

I have more info that i hope will help you help me.

it has done some thing with my clock and it no longer says am or pm it just has six (6) question marks like so ??????.

also when ever i try to open or close anything i says:

Restrictions
This operation has been cancelled due to restrictions in effort on this computer. Please contact you system administator.

i cant open task manager, my computer, control panal. every time i try that comes up.

Thank you in adanvace for your help
Richard

[moose72]

I need help real bad. I have something i dont know what it is. I cant open anything what so ever, only the internet, and i cant install anything as well. If you need any info i will do my best to get it, just tell me what I need. Thank you.

[tashi]

Hello.

"BEFORE you POST" -Preliminary Steps (http://forums.spybot.info/showthread.php?t=288) Can you run the on-line anti virus scan?

Follow the steps in the procedure (if possible) to produce a HJT log by using an un-infected computer to download the program and then run it on the infected PC.

Let us know if you can do that. Bear in mind this may not be a malware problem.

Regards.

[moose72]

i cant open anything. i have HJT on my computer, but every time i try to open it there is a pop up that says:

Restricitons
This operation has been cancelled due to restictions in effect on this computer. Please contact your system administator.

every time i try to open or close something that comes up.

[moose72]

ok I went to security.symantec.com and did a scan and it gave me this


C:\WINNT\system32\csbdu.exe is infected with Bloodhound.Packed.7
C:\WINNT\system32\STOPzilla.exe is infected with Trojan.Adclicker
C:\Documents and Settings\Owner\Incomplete\T-112886-_crack_ granles barkley 19.wma is infected with Trojan.Wimad

[moose72]

i did another scan at Stopsignscan.com and this is what it gave me
hope this helps

Status Virus or Threat File
Infected Possible Spyware Cookie FastClick Cookie
Infected Possible Spyware Cookie AvenueA Cookie
Infected Possible Spyware Cookie CasaleMedia Cookie
Infected Possible Spyware Cookie RealMedia Cookie
Infected Possible Spyware Cookie AdServer Cookie
Infected Possible Spyware Cookie PointRoll Cookie
Infected Possible Spyware Cookie Trafficmp Cookie
Infected Possible Spyware Cookie TribalFusion Cookie
Infected Possible Spyware Cookie DoubleClick Cookie
Infected Possible Spyware Cookie MediaPlex Cookie
Infected Possible Spyware Cookie HitBox Cookie
Infected Possible Spyware Cookie Zedo Cookie
Infected Possible Spyware Cookie WebtrendsLive Cookie
Infected Trojan.DownLoader.9145 c:\winnt\system32\csbdu.exe
Infected Trojan.Favadd c:\winnt\system32\stopzilla.exe
Infected Modification of Win32.HLLW.Generic.191 c:\winnt\system32\win1145695.exe

[moose72]

Hello,

I have a problem on my computer. I have tried to run HijackThis, but it is no longer on my desktop along with all my other files. every time i want to open something besides the internet. it says

"Restrictions
This operation has been canclled due to restricions in effect on this computer.Please contact your system administater"

im sorry i cant give alot of info, i really dont know what to do???


Thank you.

[moose72]

I was able to run an on line virus at http://us.mcafee.com/root/mfs/scan.asp?affid=56


when it was done it gave me this:
C:\...\jar.jar-29defbe1-2da2fa84.zip Generic Downloader.q
C:\Documents and Settings\...\Temp\f1276421.exe Qoolaid
C:\WINNT\system32\csbdu.exe Spy-Agent.bc


again thank you

[Mr_JAk3]

Hi moose72 :)

Seems that you're infected.

Are you logged in with an administrator account ? If not, please log in.
What operation system are you using ?

Please try to run a HijackThis scan in safe mode (http://www.pchell.com/support/safemode.shtml) and see it works.

Let me know and post a HijackThis log if possible :bigthumb:

[tashi]

This topic has been closed to prevent others with similar issues posting in it.

If you have not resolved the problem, please send me a private message (pm) to re-open the thread and provide a link.

[tashi]

Re-opened upon request.

[tashi]

:scratch:

Archived.