Overclock.net banner

1 - 20 of 39 Posts

·
Registered
Joined
·
2,104 Posts
Discussion Starter #1
Yesterday Bullguard 9.0 was warning me of infected files throughout the day, 90% of these were found on Firefox.exe so I guess it's related to something online.

Between 24 hours and the time the virus appeared I did not download anything and everything I've downloaded before that was totally legit.

Here are my two concerns:

  • Some spammer posted two porn threads on my forum, as an admin it was my job to delete it, I didn't click any of the links posted or look at any of the images (The second bit may be a lie) but since then virus have trickled through.
  • Accidentally clicked a Google 'sponsored link' about some Close Combat Training thing, totally unrelated to my search. The site was similar to one of those 'Get ripped in 4 weeks' or 'How a mother made $36,000 dollars working from home' sites.
I cannot open any new programs, it comes up with a message saying:

Quote:


Firefox.exe cannot start because it has a virus

The 'Firefox.exe' section is replaced with whatever program I attempt to open.

Anyone know the best way to solve this problem with reformatting as a last resort.

Help please,

- Toonshorty.
 

·
Banned
Joined
·
916 Posts
run some virus scans, avg, spybot, ad-aware, run a few as there is not one that will find them all, then if that dosnt work, uninstall firefox and reinstall it, should work
 

·
Registered
Joined
·
107 Posts
I would suggest going to filehippo.com and downloading a bunch of anti-spyware, anti-malware and hijack this.

Hijack this is really useful, but those other programs, I have found that I need at least 3 different scanners to fully detect all spyware and malware. Also use CCleaner if you haven't already. I would try using Ad-Aware 2010 first, then a couple less known ones, they all work good, but I would definitely run at least 3 different ones, CCleaner, Hijack this, CCleaner again... Of course before all this run a few virus scans and get that off the machine. Free ones of course, don't bother with anything else. File hippo has a virus section and spyware section I believe so check both out.

Use Internet Explorer to get there in the mean time. Hope this helps in some way.
 

·
Registered
Joined
·
2,104 Posts
Discussion Starter #6
I'll try safemode.

Problem is in normal windows loading a program will just give my the following message:

Quote:


Malwarebytes.exe cannot start because it has a virus.

I'm not sure what the Malwarebytes process is but I'm sure you get the gist of it.
 

·
Registered
Joined
·
4,552 Posts
remember to run ccleaner after you delete something

EDIT: i had a virus a while back that wouldn't let any AV's run, but in ccleaner, i saw a startup process that basically said stop avg from running, so untick something like that first
 

·
Registered
Joined
·
4,992 Posts
+1 for uninstalling java

But from the sound of it, the virus has infected itself into every single file? Sounds like alot of cleanup work :s

Try it in safemode, ad-aware is an underrated scanner, it has caught heaps of viruses nod/kis missed, so I reccomend a few scans with that, as well as malware bytes,
 

·
Registered
Joined
·
4,796 Posts
Quote:


Originally Posted by Toonshorty
View Post

Yesterday Bullguard 9.0 was warning me of infected files throughout the day, 90% of these were found on Firefox.exe so I guess it's related to something online.

Between 24 hours and the time the virus appeared I did not download anything and everything I've downloaded before that was totally legit.

Here are my two concerns:

  • Some spammer posted two porn threads on my forum, as an admin it was my job to delete it, I didn't click any of the links posted or look at any of the images (The second bit may be a lie) but since then virus have trickled through.
  • Accidentally clicked a Google 'sponsored link' about some Close Combat Training thing, totally unrelated to my search. The site was similar to one of those 'Get ripped in 4 weeks' or 'How a mother made $36,000 dollars working from home' sites.
I cannot open any new programs, it comes up with a message saying:

The 'Firefox.exe' section is replaced with whatever program I attempt to open.

Anyone know the best way to solve this problem with reformatting as a last resort.

Help please,

- Toonshorty.

hey i think we may have the same problem here. There is a spammer in my forums this morning posting tons a crap like: "free awareness posters stds ", "free adult mature ****", "Free Porn Movies | free adult cartoon clip" the list goes on. Anyways as soon as you go to the topic to view my antivirus started blocking all kinds of websites, popups and Trojans. That could have been how it happened to you.
 

·
Registered
Joined
·
1,007 Posts
I make all my customers download and run superantispyware before I bother making a trip to their home or have them bring me the pc. 90% of the time they are able to remove it themselves, the other 10% can't even figure out how to install it so
It'd be hard to say how it got onto your computer without knowing what processes are/were running and when they started running. Superantispyware though is the best for removal, period.
 

·
Registered
Joined
·
1,698 Posts
there is also one called combofix that is supposed to be good... Download it from here and learn more.... http://www.bleepingcomputer.com/comb...o-use-combofix
Also, Bleeping computer has some good tutorials on removing some tough malware.... good luck!

Oh and it used to be that one program could remove everything but not anymore, i've found that you need a combination of several sometimes (depends on the infection).
 

·
Registered
Joined
·
17 Posts
Use Hijack this, superantispyware, Malwarebytes. Use them all in safe mode. These three solved any virus problem i had. For future reference, use Avira free or Microsoft security essential (if you wanna use free antivirus).
Also use Firefox addons: WOT and Adblock Plus.
WOT tells you if the link is bad or good and Adblock blocks any advertisement.

Hope this Helps.

Edit: clean your temp internet files using CCleaner
 

·
Registered
Joined
·
2,962 Posts
None suggested Hijackthis yet?

Well, Hijackthis..

Post the log and I could check it for you.

EDIT: Ninja'd, check above post
 

·
Registered
Joined
·
1,698 Posts
Quote:


Originally Posted by Xenthos
View Post

None suggested Hijackthis yet?

Well, Hijackthis..

Post the log and I could check it for you.

EDIT: Ninja'd, check above post


I see what u did there..... 3 people suggested it already.....
 

·
Registered
Joined
·
2,962 Posts
Quote:


Originally Posted by MrAMD_Fan
View Post

I see what u did there..... 3 people suggested it already.....


I tried, I failed, can't blame me I'm Belgian.


EDIT: I only see 1, I'm blind
 

·
Registered
Joined
·
2,104 Posts
Discussion Starter #18
Quote:


Originally Posted by Timlander
View Post

hey i think we may have the same problem here. There is a spammer in my forums this morning posting tons a crap like: "free awareness posters stds ", "free adult mature ****", "Free Porn Movies | free adult cartoon clip" the list goes on. Anyways as soon as you go to the topic to view my antivirus started blocking all kinds of websites, popups and Trojans. That could have been how it happened to you.

I know right! They just keep on coming no matter what Anti-Bot measures you put into place you somehow end up with endless posts of porn. One was something like 'Banana' and the other one was 'Hot mature porn' or something like that.


They spam my forum AND give me viruses... dis spammer shall die! Paradigm Shift into Anti Virus mode: COM/REV/MED.
 

·
Registered
Joined
·
4,605 Posts
Quote:


Originally Posted by MrAMD_Fan
View Post

there is also one called combofix that is supposed to be good... Download it from here and learn more.... http://www.bleepingcomputer.com/comb...o-use-combofix
Also, Bleeping computer has some good tutorials on removing some tough malware.... good luck!

This
 
1 - 20 of 39 Posts
Top