Solved Malware Problem, please help??

N

Neurolanis

Member
I have a REALLY annoying malware that came with a supposed anti-spyware program called "Malware Defence". I believe this came along with a 'patch' to an old computer game I tried re-installing last night called "Age of Mythology." It was the only thing I downloaded, so I don't know what else could be the cause.

The Problem: I keep getting ads popping up for "gaggers" or "VBS.TV" and other things, as well as frequent warnings that I have a virus (specifically, a trojan.win32.agent.dcc) and tells me that I need to download Malware Defence. It also disables SUPERAntiSpyware and Norton Anti-Virus. I have tried looking up problems in Task Manager, and removed one program called "DPS" which is considered harmful. I found a single file called "Malware Defence" that was a read file only, but it was very well hidden. It had a 'special permission' so I had to download a program from vistax64 in order to 'take ownership' of the file so I could remove it. But when I try operating under normal mode, the problems remain.

There is no sound, with or without safety mode, and I am worried about what other harm it is doing to my computer. :( Does anyone have any ideas what I can do to fix this thing??

BTW, I have a Dell 1420 Inspiron, Windows Vista.
 

My Computer

System One

Hey there Neurolanism,
Your in good hands.

First download and install MalwareBytes. Install it and allow it to download the latest updates for the scanner. Once it finishes, restart your computer. When this happens, unplug your ethernet cord if you are hardwired, and if your wireless unplug the router. Next, run a scan and clean up anything you find.
restart again and plug everything back in.
You should have been able to save a notepad file containing your results of the scan.
Post that file here so I/we can have a look at it and check to see what your up against.

Good luck and let us know,
Ben
 

My Computer

System One

  • Manufacturer/Model
    Dell
    CPU
    Intel(R) Celeron(R) CPU 420 @1.60 GHz
    Motherboard
    Dell Inspion 530 Default
    Memory
    PNY 4GB 240-Pin SDRAM DDR2 800 (PC2 6400) Dual Channel
    Graphics card(s)
    ATI Radeon HD 2400 PRO
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Gateway PnP Monitor
    Screen Resolution
    1024x768 @ 75 Hz
    Hard Drives
    Seagate 250G ATA SATA-II
    Case
    Dell Inspiron 530
    Cooling
    None
    Mouse
    Logitech EX100 Combo
    Keyboard
    Logitech EX100 Combo
    Internet Speed
    100 MB/s
Thank you so much for your help! I actually tried this earlier but it wouldn't run, but I'll try it again by restarting it! Would Safe Mode prevent it from runnning?
 

My Computer

System One

If it doesn't run in the normal boot then yes I would start it in safe mode.

Let us know,
Ben
 

My Computer

System One

  • Manufacturer/Model
    Dell
    CPU
    Intel(R) Celeron(R) CPU 420 @1.60 GHz
    Motherboard
    Dell Inspion 530 Default
    Memory
    PNY 4GB 240-Pin SDRAM DDR2 800 (PC2 6400) Dual Channel
    Graphics card(s)
    ATI Radeon HD 2400 PRO
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Gateway PnP Monitor
    Screen Resolution
    1024x768 @ 75 Hz
    Hard Drives
    Seagate 250G ATA SATA-II
    Case
    Dell Inspiron 530
    Cooling
    None
    Mouse
    Logitech EX100 Combo
    Keyboard
    Logitech EX100 Combo
    Internet Speed
    100 MB/s
Also, you should disable the system restore option before installing the program.

Let us know,
Ben
 

My Computer

System One

  • Manufacturer/Model
    Dell
    CPU
    Intel(R) Celeron(R) CPU 420 @1.60 GHz
    Motherboard
    Dell Inspion 530 Default
    Memory
    PNY 4GB 240-Pin SDRAM DDR2 800 (PC2 6400) Dual Channel
    Graphics card(s)
    ATI Radeon HD 2400 PRO
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Gateway PnP Monitor
    Screen Resolution
    1024x768 @ 75 Hz
    Hard Drives
    Seagate 250G ATA SATA-II
    Case
    Dell Inspiron 530
    Cooling
    None
    Mouse
    Logitech EX100 Combo
    Keyboard
    Logitech EX100 Combo
    Internet Speed
    100 MB/s
This is driving me nuts...I got no sleep last night and I'm going CRAZY....I spent HOURS looking through the task manager and then removing unsafe files one by one...researching every software name under my user name to see if it's a malware and I did find and remove a few...I restarted under normal mode and it had only gotten worse! :(

Malwarebytes won't run, but I downloaded and am currently running
Microsoft® Windows® Malicious Software Removal Tool (KB890830). Hopefully it will find something....

Every time my computer restarts in normal mode a message comes up to update "Creative Products." Looking it up online but can't find much yet...
 

My Computer

System One

How this started was by suddenly Norton Anti-Virus reacted to a threat so bad that it had to shut my computer down (but only after Ad-Aware started running a scan and the two seemed to compete against each other (and after my computer restarted neither work.) This is very weird, because Ad-Aware hasn't worked for months, supposedly because it is not compatible with Norton. Yet, it just started running a scan on its own? I removed Ad-Aware right away, believing that it had been infected, but that was only the start of the problems..

Apparently a lot of people are upset with Creative Products for this aggressive spyware crap. It may not have been designed by them though (I know that some of these companies create malware to attack the compitition by attacking their customers, and thus trying to make their customers come over to them!) It's very aggravating, I don't know how these people sleep at night (whoever take the time and energy to create these things.) It's like walking home and finding a strange in your home, bashing your personal stuff with a crowbar...
 

My Computer

System One

Neurolanis said:
Ok, this looks like something new. I see people talking about this only in the last couple of days. Seems that it's trying to entice you to download this Malware Defender program (like with other forms of malware problems, you have a virus so you should buy our product.)

Link: Remove Malware Defender 2009, removal instructions
Click to expand...

Neurolanis,
We will solve the problem. It takes time. I have delt with these problems many times. Were you able to install and update MalwareBytes?

Let us know,
Ben
 

My Computer

System One

  • Manufacturer/Model
    Dell
    CPU
    Intel(R) Celeron(R) CPU 420 @1.60 GHz
    Motherboard
    Dell Inspion 530 Default
    Memory
    PNY 4GB 240-Pin SDRAM DDR2 800 (PC2 6400) Dual Channel
    Graphics card(s)
    ATI Radeon HD 2400 PRO
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Gateway PnP Monitor
    Screen Resolution
    1024x768 @ 75 Hz
    Hard Drives
    Seagate 250G ATA SATA-II
    Case
    Dell Inspiron 530
    Cooling
    None
    Mouse
    Logitech EX100 Combo
    Keyboard
    Logitech EX100 Combo
    Internet Speed
    100 MB/s
Neurolanis said:
Ok, this looks like something new. I see people talking about this only in the last couple of days. Seems that it's trying to entice you to download this Malware Defender program (like with other forms of malware problems, you have a virus so you should buy our product.)

Link: Remove Malware Defender 2009, removal instructions
Click to expand...

Do not download these products. They are just like every single other Trojan out there right now. They all infect you with their fake antivirus programs and then try to trick you into believeing you that you are infected. Once they get you, they want you to buy their product (fake, obviously). Once you enter your credit card info... POOF
There goes your Personal funds/ID

Make sure you ignore all of these pop ups.

Let us know,
Ben
 

My Computer

System One

  • Manufacturer/Model
    Dell
    CPU
    Intel(R) Celeron(R) CPU 420 @1.60 GHz
    Motherboard
    Dell Inspion 530 Default
    Memory
    PNY 4GB 240-Pin SDRAM DDR2 800 (PC2 6400) Dual Channel
    Graphics card(s)
    ATI Radeon HD 2400 PRO
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Gateway PnP Monitor
    Screen Resolution
    1024x768 @ 75 Hz
    Hard Drives
    Seagate 250G ATA SATA-II
    Case
    Dell Inspiron 530
    Cooling
    None
    Mouse
    Logitech EX100 Combo
    Keyboard
    Logitech EX100 Combo
    Internet Speed
    100 MB/s
Try the superantispyware ONLINE SCAN here is the link for it.
You do not have to install anything. This way it will do its job without
a hitch.
SUPERAntiSpyware.com - Online Scanner
Please give it a shot. I have used it before and it works great.

Jimmy
 

My Computer

System One

  • Manufacturer/Model
    Gateway
    CPU
    intel core 2 Extreme QX6700
    Motherboard
    intel
    Memory
    3 gigs
    Graphics card(s)
    NVIDA
    Sound Card
    Creative SB X-FI
    Monitor(s) Displays
    Gateway 24 HD Monitor
    Screen Resolution
    1920 by 1200 pixels
    Hard Drives
    2-500 gigabyte hard drive Western digtal
Update: I tried downloading another program called Download Personal Antivirus infection scanner, from here: ]Remove Personal Antivirus

It is supposed to remove a new threat like the one I am facing. I researched the website first and it seemed to be well regarded. But while the software was installing the same exact thing happened as had happened before: my screen went black and it said that due to a malicious threat my computer would have to shut down. So, I don't know if that download itself is infected or if that was just the first problem reacting to it (in the same way that it won't let programs scan for problems, etc.)
 

My Computer

System One

If that does not work I think you should get yourself ready for a nice clean install.
 

My Computer

System One

  • Manufacturer/Model
    Gateway
    CPU
    intel core 2 Extreme QX6700
    Motherboard
    intel
    Memory
    3 gigs
    Graphics card(s)
    NVIDA
    Sound Card
    Creative SB X-FI
    Monitor(s) Displays
    Gateway 24 HD Monitor
    Screen Resolution
    1920 by 1200 pixels
    Hard Drives
    2-500 gigabyte hard drive Western digtal
Thanks, Jimmy :) Didn't know that SUPERAntiSpyware had an online scan option. So far it's found 42 tracking cookies, but nothing serious.

I'll look over the other ones you posted when the scan finishes.
 

My Computer

System One

My Computer

System One

  • Manufacturer/Model
    Gateway
    CPU
    intel core 2 Extreme QX6700
    Motherboard
    intel
    Memory
    3 gigs
    Graphics card(s)
    NVIDA
    Sound Card
    Creative SB X-FI
    Monitor(s) Displays
    Gateway 24 HD Monitor
    Screen Resolution
    1920 by 1200 pixels
    Hard Drives
    2-500 gigabyte hard drive Western digtal
Any updates? Anyone know anything yet?

When I seachred "trojan" I found this:

C:\Users\(my user name)\AppData\Roaming\GTek\GTUpdate\AUpdate\Channels\ch_u4\HTML\AutoMaintenance\diag\trojan.ini

Is this harmful or..?
 

My Computer

System One

You must log in or register to reply here.
Back
Top