Need some PC virus help please!

[Nightbreed]

Came home from a weekend trip to a nice Virus on my PC.

Can't run any .exe files, .bat or anything. Firefox is the only thing that opens.

Tried to run a .regExe fix but it does not allow me to run it or right-click merge. Can't boot up in safe mode or get to my task manager.

PC is old as heck and CD drive no longer works as well.

Any ideas on what I can try before just wiping it completely out? Only thing on there I care about is some music and pictures which I can transfer to an external without much trouble.

Thanks for any help!

[Omniyoji]

Anti-virus via floppy? If you even have the drive...

[Nightbreed]

I can try and put one on a flash drive, but since it's .exe wouldn't I run into the same problem?

[Omniyoji]

I meant bootable as in running before the OS loads. If your PC is old as heck maybe it wont allow to boot from USB :/

[Nightbreed]

Will give it a try and see if I can get any further, thanks!

[Nightbreed]

No go with USB drive.

Small update: it seems I can open an .exe file if I click it fast enough on bootup before this virus pops up, first thing I saw was malware bytes so that is scanning now, if it doesn't help are there any free virus programs I can run that will work with Norton installed? Last year someone gave me a norton key, expired last month though (rarely use this PC) and AVG won't run with Norton there....unable to remove Norton due to virus.

Any ideas or suggestions?

Thanks again!

[Jefe]

Lezee, first: get combofix, second: rename it to some gibberish, third: disconnect the machine in question from the internet, fourth: execute combofix. It will then attempt to do its thing, once that you can dl/update an antivirus and hopefully clean the sys.

[Nightbreed]

Will give that a try when I get back from work, thank you!

[Nightbreed]

Didn't run combo fix, to be honest the site scared me away, can it really screw my machine as bad as they say? Ran norton Internet security someone gave me and it does not find anything.....

[chiyio]

since you can't boot from another source on this pc, if you have access to another computer, take the HD out of the infected one and put it in another one and scan it from there. that way you don't even have to load the OS on it.

[Ratatapa]

The virus is think point?

If yes problem is simple, create a new user account with admin rights, log ito it

Try to backup your personnel files and delete the first account,then recreate it and problem solved

[Nightbreed]

I am not sure what it is, just have popups continue to come to buy software from them, everything I have tried so far has failed. Have a buddy coming over later so hopefully I can take care of it then.

Not sure why LOLNorton is not picking anything up, as soon as I got it installed it said PC is at risk, fixing threat but it always come back Congratulations no threats found.

**I guess Norton did not like me laughing at it, not 2 minutes later it pops up that it detected a threat, 1 minute later everything works, virus gone**

Anything else I should not now, any type of "sweep or cleaner" I need to run?

Thanks everyone for your help!

[xopher]

Hitman Pro.

[Ragnell]

I like Hiren's Boot cd for these types of situations, it's easy to use and make, can use a CD or a USB drive and has mutliple virus/spyware programs to kill before the PC boots so there really any way for it to stay hidden or be unable to delete

[Mafai]

The exe not opening problem is due to a change the virus made the registry.

if you make a .reg file (just save as in notepad and change dropdown to all files and name the file .reg) with the following, it will fix your executable problem (might need a reboot)

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
[-HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[-HKEY_CLASSES_ROOT\secfile]

after you have exes runnable, you sound like you know what to do. Hmm after rereading your post you might not be able to run this, and you can't open regedit since its an exe to manually do this stuff...

if you can't open notepad since its an exe, the reg file is here in a zip file.

http://www.lmxvii.net/mafai/rayyo.zip

[Jakson]

What does
http://i4.photobucket.com/albums/y146/jplaunty/bsod.jpg
mean?
I can't keep my pc up normally because this comes up seconds after the desktop loads. Put it in safe mode and I can run malwarebytes and cccleaner, but Combofix causes this bluescreen again. As far as devices go, I had two monitors hooked up (not normally) for a few hours before this problem started happening, but I also had one of those "Congrats you win" boxes pop up for no reason and a new tab open in firefox.

Edit: Just saw a thread mafai put up on the 11th. Makes me scared cause he seems to know what he's doing!

[Nightbreed]

That is the screen I was getting when I tried to boot up in Safe Mode, I am glad this crap is fixed now though.

Hopefully someone here can help you out man!

[Jefe]

It's probably hardware or an incompatible driver or software. If you suspect combofix is causing this, then disable it and restart the system. Did you install anything or messed around w/ the mem sticks or other hardware?

[Jakson]

All I've done since I built the computer 3 months ago is plug and unplug a samsung tv and my iPod. Although today I'd been doing a lot of shit and maybe I over heated or something? At one point I was converting a large avi file for burning, downloading a bunch of sopranos and other stuff (this is probably the source - tried downloading iOs 4.1 to revert my ipod to), watching a movie, and playing ffxiv at the same time. I haven't opened up the case since I built it.

[Jakson]

Also, should point out, my mobo is the ASUS M4A77TD, and when it says it can take my gskill 2gig x2 memory sticks it says something like it has to OC the memory, and it makes me think all the crap I was doing today maybe overheated it. However, I did get that "Congrats you're a winner" pop up which I'm sure is indicative of virus. I ran malwarebytes scan, cleaned it up, then ran the full scan and it says theres nothing to find though.

Edit: I booted it up on normal and immediately got the same screen, tried again and now I'm back on the afflicted pc (was on laptop) and it seems to be working fine, but combofix still causes that screen to pop up