PDA

View Full Version : Unclear where to start - so here it goes - my system is hosed



katchatu
2008-08-09, 22:40
I read that I'm suppose to wait to be invited to post the hijack log. In the meantime here's my story:

- Evening of Aug 7 - an 'AntiMalwareGuard" installer showed up on my laptop when I booted up. (I did not initiate or request this program). Altho, it would say it couldn't connect to the internet.

- I popped open Firefox and was able to get onto the internet with no problem. Then I noticed I wasn't able to open up the few standard wellknown sites I visit regularly.

- Aug 8 - booted up, there's that AntiMalwareGuard again. Updated Spybot, which tried to update me to 1.6, but the .exe disappeared. Ran Spybot 1.4 anyway, which found 3 Virtumundo and fixed.

- Continued to have problems surfing the Web and Norton is telling me it's preventing an attack every 2 minutes.

- Went to safemode and ran a Norton scan, which found an 'installer' and 'resolved it'. Ran Spybot in safe mode again - found another Virtumundo - fixed.

- Out of safemode - problems still persist.
. I'm getting porno popups.
. ads on CNN want to run registry cleaners.
. Unable to search thru google - takes forever (either via Firefox or MSIE)
. Am able to view Google News and can get to some sites.
. But once the site is detected by the virus - I'm not able to go there again.

- I'm now only able to get to this site, by accessing the actual Spybot program -> Help -> Home.

Also in Spybot -> System Startup -> unchecked winvsnet.exe and khhhe.dll (stopped the Norton intrusion alerts) The winvsnet.exe was loaded on my computer on Aug 7. I did not load it.

And finally, noticed yesterday on August 8 via add/remove programs that any antivirus, antispam, MS programs, and other freguently wellknown programs were 'last used' on Aug 9. This was yesterday evening, again on Aug 8.

Please help!!! I'm at my wits end, my dog is afraid of me because I keep yelling "I'm going to kill the guy who infected my system" and I'm on the verge of tears.

Thank you!!

tashi
2008-08-10, 02:29
Hello,

In order for one of our volunteer helpers to advise you when available, please follow the procedure in this sticky which does ask for a HJT log to be posted. ;)

"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Start a new topic providing the HJT log, and include a link to this thread in your new topic.

Regards.