black desktop

[katherine1]

Hi

 

I'm having problems with vista too. Yesterday I kept being prompted to buy the vista 2010 security package as a vista scan showed that I had 29 infections. I already have AVG free security so ran a scan, and this showed no infections. After this, the Vista alerts kept coming up, and when I ignored the alerts I couldn't access any other programmes and the internet was very slow. I decided to restart my laptop and signed in to find a black desktop with the alerts in the middle and only the vista toolbar at the top of the desktop from which I can access the internet..

 

Any ideas?

[RandyL]

Hi katherine. I just removed one of these the other day. Malwarebytes will get rid of it. Use the free scan. Your security is not good in my opinion so I suggest you follow the entire guide in case you have anything else. At the end you will need to reboot for Malwarebytes to get rid of it.

 

Your computer appears to be infected with Malware. Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a combination of the words malicious and software. The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

 

It is in your best interest to note the following:

1. Please disable your resident security applications (such as AVG, Spybot, WinPatrol, etc.) before performing the below procedure so that they do not interfere with the process.
   
2. Perform all the steps in the order listed to avoid any conflicts.
   
3. If unsure, please stop and voice your doubts.
   
4. You might be required to go offline during the disinfection process. Therefore, it is recommended to print off the instructions below for ease of reference.
   

If you stick to the above guidelines, all should go smoothly.

 

 

 

================================================

STEP 1

1. Download ATF-Cleaner by Atribune.
   
2. Save the file to your Desktop.
   
3. Double-click on the file to run the program.
   
4. On the Main tab, check the Select All button.
   
5. Next, click on the Firefox tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Firefox, then click No at the corresponding prompt.
   
6. Now, click on the Opera tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Opera, then click No at the corresponding prompt.
   
7. Press the Empty Selected button and click OK to acknowledge the corresponding prompt.
   
8. Click on the Exit button to quit the program.
   

================================================

STEP 2

1. Please click here to download Malwarebytes' Anti-Malware.
   
2. Save the file to your Desktop.
   
3. Double-click mbam-setup.exe and follow the prompts to install the program.
   
4. At the end, make sure a check mark is placed next to:
   1. 
      
   2. Update Malwarebytes' Anti-Malware
      
   3. Launch Malwarebytes' Anti-Malware
      

[*]Click Finish.

[*]The program will download and update itself if it finds the necessity to do so. Please allow this.

[*]Once the program has loaded, select Perform full scan, then click Scan.

 

 

Note: Depending on your computer specifications, the scan may take some time to complete. Please wait patiently and do not interrupt the process.

[*]When the scan is complete, click OK, and then Show Results to view the results.

[*]Make sure that every entry is selected, and click Remove Selected.

[*]Restart your computer.

================================================

STEP 3

1. Please click here to download SUPERAntiSpyware (Free Version).
   
2. Save the file to your Desktop.
   
3. Double-click SUPERAntiSpyware.exe and follow the prompts to install the program.
   
4. Open SUPERAntiSpyware.
   
5. Under Configuration and Preferences, click the Preferences button.
   
6. Click the Scanning Control tab.
   
7. Under Scanner Options make sure the following fields checked:

   [*]Click the Close button to leave the control center screen.

   [*]On the main screen, under Scan for Harmful Software click Scan your computer.

   [*]On the left, make sure you check mark All the Fixed Drives.

   [*]On the right, under Complete Scan, choose Perform Complete Scan.

   [*]Click Next to start the scan. Please be patient while it scans your computer.

   [*]After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.

   [*]Make sure every entry has a check mark next to it and click Next.

   [*]A notification will appear that Quarantine and Removal is Complete. Click OK and then Finish to return to the main menu.

   [*]Restart your computer.

   ================================================

   STEP 4
   1. Please visit the ESET Online Scanner, using Internet Explorer to initiate the scan.
       
      Note: If you are running Windows Vista, then you will need Administrative privileges to complete the latter part of the procedure. To do so, right-click on the Internet Explorer icon in the Start Menu and select the Run As Administrator option in the shell context menu.
      
   2. Check mark the YES, I accept the Terms of Use box.
      
   3. Click the Start button.
      
   4. Click the Install button on the following screen.
      
   5. Click Start. This will will initialize and update the scanner engine.
      
   6. Check mark the box beside Remove found threats.
      
   7. Click the Scan button. This will start the scan. Please be patient while it is in progress.
      
   8. Restart your computer.
      

   ================================================

   STEP 5
   1. Click on Start > Programs > Accessories > System Tools and select System Restore.
      
   2. Choose the radio button marked Create a Restore Point on the first screen and click Next. Give the restore point a name then click Create. The new point will be stamped with the current date and time. Keep a note of this so you can find it easily should you need to use System Restore.
      
   3. Next, click on Start > Run, type Cleanmgr and click on OK.
      
   4. Click on the More Options tab.
      
   5. Click the Clean Up button in the System Restore section to remove all previous restore points except the most recent one.
      

   This will remove any infected files that have been backed up by Windows. The files in "System Restore" are protected to prevent any programs changing those files. This is the only foolproof way to ensure the deletion of those files.

    

   Note: Do not clear restore points on a regular basis as doing so will clear all previous restore points even those that you may need. System Restore is a useful tool to revert your computer back to a working condition if something goes wrong.

    

   Re-enable all your security applications and please return here and tell us how the computer seems to be operating.

    

   Happy Safe Computing!

    

   -- Goku

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining

[katherine1]

how do i disable avg?

[RandyL]

Right clicking the icon would often give you options but you don't always need to disable it.

[katherine1]

I have my desktop back now but am still getting alerts from vista antispyware 2010... am I still infected?

[maynardvdm]

Hi

 

Where did you get vista antispyware 2010

 

I think that is not a genuine antivirus program.

[katherine1]

I'm assuming it isn't either, but have no idea how to remove it. It keeps popping up with security alerts but other scans show that I'm fine now as I ran through the 5 steps mentioned above.

 

Any ideas?

[maynardvdm]

Hi

 

Did you update Malwarebytes before running it?

[katherine1]

I keep trying to but it downloads and if I press run it doesn't do anything?

[Tootech]

Maynard - Malwarebytes won't run. I sorted one of these on an XP machine last week and the rogue deleted the mbam.exe file when it ran - it did the same to Combofix too.

 

The way around it I found was over at bleepingcomputer, and I used a modified .exe file that I think had a different file signature. It looks like there is a better method now - have a look

 

How to remove XP Internet Security 2010, Antivirus Vista 2010, and Win 7 Antispyware 2010

[maynardvdm]

Nice one Tootech

[katherine1]

I downloaded the stop zilla one and it came up with 221 infections, but to remove them it says I have to buy a registration code online, is this the only way?

[katherine1]

Also, whenever I try to access the internet a bubble pops up asking which programme I want to run it with because Internet Explorer is apparently now not found. What can I do?

[maynardvdm]

Hi

 

Malwarebytes is Free. It should not ask for a key.

[RandyL]

Katherine follow the link provided by Tootech. How to remove XP Internet Security 2010, Antivirus Vista 2010, and Win 7 Antispyware 2010

 

Scroll down to the section Automated Removal Instructions for XP Internet Security 2010, Antivirus Vista 2010, and Win 7 Antispyware 2010 using Malwarebytes' Anti-Malware:

There you will find two files to download.

Malwarebytes and FixExe.reg

Follow the 14 step instructions there.

The infection you have is different then the one I removed but if you follow those steps it should work.

Forget about stopzilla. Just do the 14 steps.

[katherine1]

I'm trying to follow the link but another webpage won't open

[RandyL]

Try right clicking the link.

Copy shortcut.

Open another IE window.

Paste the address in the address bar.

 

Please note though that some of the instructions require you to use another non-infected computer.

[katherine1]

when I try to run step 8 it comes up with error code 707 (0, 3)

[RandyL]

Did you merge the FixExe.reg file into the registry first?

 

For that matter did you do step 3 first on a different computer?

[katherine1]

the 2010 virus appears to have gone, but now the problem is with opening programmes such as microsoft word and also the internet explorer iself. Both come up with a box saying 'appicaion not found.'

[RandyL]

OK did you reboot?

 

Look at the guide again.

 

You should next run Superantispyware to see if it finds any other infections.

 

Superantispyware also has some repair functions but scan first.

[RandyL]

Past 6AM here so follow up people if you can. I'll be back as soon as time and health allows. It's just a matter of doing all the steps in the correct order as prescribed. Tootech knows.

[katherine1]

Thanks, I'll let you know what's going on

[katherine1]

Think I've got rid of all of the infections now, but all programmes are saying that the application is not found. How do I sort this out?

[RandyL]

Before it was just Internet Explorer and Word that would not open. Now you are saying that ALL programs won't open. Are you sure you mean ALL.

 

You said you think the infections are gone. What were the results of the Malwarebytes and Superantispyware scans?

 

As I understand it the only thing you did was run Superantispyware between the time Of IE and Word not working and now but now no programs open. Have you done anything else that we are not aware of?

 

Please be specific as to what you have done, when, the results and what you have not done. Have you ran any scans not suggested here? Please be detailed in your answers.