Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Window 7 - Unable to Boot - Malware Suspected


  • This topic is locked This topic is locked

#76
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Is this legit?
  • 0

Advertisements


#77
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,999 posts
That is the Trojan. You can close those windows so you can work on it? If unable to close these windows, try throughout the Task Manager.

Are you able to download Combofix and run it?
  • 0

#78
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,999 posts
Follow on my instructions and you should not have a problem.
  • 0

#79
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,999 posts
Are you able to run Combofix.
  • 0

#80
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Yes, combofix is on the desktop. However, I can't launch Task manager or any other program. It just pops up another waring window. So i am unable to disable Microsoft Security Essentials.

Rebooting now in Safe Mode to see if i can get any further.
  • 0

#81
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Okay. I was able to login in SAFE MODE and launch the Task Manager right away and kill the fcj.exe*32 and that shut down the trojan windows. But when I launched MSE to disable it, it instead relaunched fcj.exe*32. So I am not sure how to disable MSE since I cannot open it to disable it. :blush:
  • 0

#82
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
I can try to run combofix. But your instructions say it is VERY important to disable my anti-virus software and MSE is on the list.
  • 0

#83
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
I am still in Safe Mode. I *can* launch ComboFix.exe. It goes to the Disclaimer Page. I have not gone further. At the same time I successfully launched ComboFix, the fcj.exe*32 launched. I killed it from the Task Manager.

Should I proceed with ComboFix?

If Yes, then should I kill the fcj.exe*32 whenever it appears in the task manager as ComboFix runs?
  • 0

#84
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
I'm going to try from Normal Mode.
  • 0

#85
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,999 posts
Ok Stop what you are doing. Don't use the computer in Normal or safe mode anymore until we check that drive from an external environment.

I am testing Testdisk in My computer as we missed a deeper scan during the process. I want to make sure my instructions are correct.

Meanwhile, Run a FRST scan from the Repair Console and post its report.
  • 0

Advertisements


#86
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Too late. I already started running ComboFix from Normal mode, despite warnings that MSE is running. It's crunching now... just completed Stage 3. Should i power off the computer in the middle of it?
  • 0

#87
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Okay. ComboFix finished. It did not ask me to Install the Recovery Console. It rebooted and generated the attached report; however, i changed my last name in the report to Zxx so my surname doesn't end up in google.


ALSO, I cannot seem to open any programs. I get this error message (see attached picture).

"Illegal operation attempted on a registry key that has been marked for deletion."

How do I fix this?

Attached Thumbnails

  • mmm.jpg

Attached Files


  • 0

#88
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Okay. I shutdown. Windows installed 13 updates. Reboot to normal mode seemed to take a long time. Programs all seem to be opening fine. No sign of a virus.
  • 0

#89
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
Firefox and thunderbird are running fine. Everything seems snappy. Are there any other steps we need to do?
  • 0

#90
TangentMedia

TangentMedia

    Member

  • Topic Starter
  • Member
  • PipPip
  • 75 posts
I will be back in about 2 or 3 hours. Let me know what is next. Thanks!!!
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP