Expert: Brian Benosky - 12/24/2008

Question
QUESTION: Hi Brian, i got a virus on my laptop 2 days ago, it pop up a window something like 'request for signature code' but i can't really recall the actual sentence, and it disabled my AVG, spybot and Ad-ware, which i can't update the virus definition and it also attack all my internet browser, i try search information from google, but it will link me 2 the virus scan website after i clicked on the result. I try 2 download several free antivirus n spyware software and found it blocks as well, and can't browse into pages like avg.com, macafree and so on Hope u can be able to assist my problem. Cheers!! Thank you so much

Kris Chin








ANSWER: Hi Kris

Let's try running a Malwarebytes scan, preferably in Safe Mode.  Please download Malwarebytes' Anti-Malware to your desktop from here:

http://www.besttechie.net/tools/mbam-setup.exe

Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to
o Update Malwarebytes' Anti-Malware
* then click Finish.
* If an update is found, it will download and install the latest version.  Do not run a scan yet.

Restart the computer in Safe Mode by continuously tapping the F8 key on boot until a black screen with a menu appears.  Choose to Start Windows in Safe Mode.  Log on as usual.  Open Malwarebytes and run a Full Scan.

* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.  Save that log and reboot normally.

After rebooting, please download HijackThis to your desktop from here:
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
Make sure you close EVERY open window and ALL browser windows. The only thing that should be open is the HijackThis program.
Double-click on the file you just downloaded.
Click on the "Install" button.
Upon install, HijackThis should open for you.
Should it not open, go to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe
Choose 'Do a system scan and save a log file'.
Copy the text file which opens in Notepad and paste it in your follow-up, along with the Malwarebytes log.
  * Do not fix any entries in HijackThis, as they may be harmless.

Brian

---------- FOLLOW-UP ----------

QUESTION: Hi there, thanks for your reply. I've try use the linked but i can't open the page, any idea how can i install the software? I think the spyware had block certain known anti virus software. I tried install avira antivirus it was successful but it can't help me rectify the problem. Thanks.

Answer
Hi Kris

You could try downloading the file in Safe Mode With Networking.  If that does not work, download it from another computer and burn it to a CD or put it on a thumb drive.  I could also email the file directly.  My email is numbersix6@yahoo.com.  Just let me know.

Brian