win32.FraudPack

[atlantisdan]

Please assist...I have some pretty serious malware. I have run a spybot scan and it states that I have Win32.FraudPack and Microsoft.Windows.Security.InternetExplorer If I attempt to fix problems, I am prompted that I am not the administrator and cannot do this. It has shut down my Internet explorer, and I am only able to get online now through firefox. Please assist....
Danny

[atlantisdan]

http://forums.spybot.info/showthread.php?t=58864 This thread is how this happened and I too see the security tool that he is talking about. I think this may be the same infection.

[tashi]

Hello atlantisdan,

If I attempt to fix problems, I am prompted that I am not the administrator and cannot do this.
FYI.

"On Windows Vista and Windows 7, Spybot-S&D might tell you that you are not authorized to perform some actions, since they require Administrator rights. You can solve this problem as follows:

1. Right-click the Spybot - Search & Destroy entry in your start menu, instead of just left-clicking to start it.
2. Choose Run as administrator from the context menu."

From our FAQ here: http://www.safer-networking.org/en/faq/42.html

There is also a screen shot which should help.

For someone to take a look at the system please see this forum's FAQ which also includes instructions on posting a preliminary DDS log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start a new topic here in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) and a volunteer analyst will advise you when available. :)

If DDS won't run please start a new topic anyway and provide a link back to this topic.

Best regards.

[atlantisdan]

I used the administrator from the start button, when i reran Spybot, it stated that there were no threats detected, but I still have two unknown shortcuts that were added to my desktop and I still cannot access the internet from Internet Explorer.

I do not know how to run a DSS...and the mysterious "security tool" still exists in my programs...

[tashi]

Hi atlantisdan,


I do not know how to run a DSS...
Instructions are in the second post: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Best regards.

[tashi]

Split off log to: http://forums.spybot.info/showthread.php?t=59055

This thread closed. :)