Author Topic: Possible virus after clicking on Malwarebytes program update popup  (Read 10706 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Hi dear friends, it seems I may need your help one more time :(
My PC seems to have, maybe, gotten a virus. It started when I clicked on an update from Malwarebytes, when I clicked on it a few popups came up saying Malwarebytes stopped a malicious site. After that, I am unable to download anything on my computer, not even malwarebytes, which I can not open to run it. I tried also downloading ADWCleaner but can not downloaded it, and my Google browser is not working either, it was the browser I was using when this happened. I can open  IE , but I can not download it seems, like nothing.
I run an Avast full scan but it got stuck at 19%, it run for 3 hours, but stuck at 19%. I started the full scan again and it is stuck now at 19% again.
Can you please help me? Since I can not download anything on that computer, I can not follow your recommendations and I do not know what to do. I do have this laptop and an iPad that are OK.
The computer infected is a Dell, Windows Vista, has ( or I should say had at the time of possible infection ) Malwarebytes Premium and Avast Premier 2015. Google Crome not working at the moment and IE is working so far..
Thank you so much!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #1 on: March 26, 2015, 08:04:01 AM »
Quote
I do have this laptop and an iPad that are OK.
good .....

first install MCShield on your lappy   http://www.mcshield.net

then see instructions here  https://forum.avast.com/index.php?topic=53253.0
download Farbar Recovery Scan Tool on your lappy, then move it over with a USB stick, run as instructed, move the two logs back to the lappy and attach here



« Last Edit: March 26, 2015, 08:05:48 AM by Pondus »

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #2 on: March 26, 2015, 08:19:43 PM »
Thanks Pondus! Should I also install mcshield on my infected PC too?
Do I need it in my laptop if I have malwarebytes premium too?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #3 on: March 26, 2015, 08:23:50 PM »
Thanks Pondus! Should I also install mcshield on my infected PC too?
Do I need it in my laptop if I have malwarebytes premium too?
It is recomended to have on all computers. This is a special scanner that protect against malware that use removable drives to spread
it is a install on forget tool, it use no recours except for when you plug in a USB device and it scan for a few seconds

lots of info / reviews on MCShield website

« Last Edit: March 26, 2015, 08:26:19 PM by Pondus »

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #4 on: March 26, 2015, 08:34:08 PM »
Hi Pondus, I plugged in the USB on my PC, but it won't open. I can not either open anything on the Start menu, I can not even shut down or use Sleep on it, It won't respond.
Should I just turn off the PC by pressing the power button and see what happens? and then once restarted try again or shutting it down will make it worse?
I am thinking that maybe Vista is frozen , but I can open some stuff like IE, Avast ( even thou the scanning stops at 19%, it won't go further)  also Windows update opens up, but if  click on the USB or Start menu, there is no response, can not open Google either...
Avast safe Zone does not open either...
I just tried running a quick scan with Avast, the screen went black, then all white and it says Avast is not resppnding... all the screen is white with light blue borders around it
« Last Edit: March 26, 2015, 08:53:52 PM by jokera »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #5 on: March 26, 2015, 09:33:36 PM »
What version of windows do you have and is it 32 or 64 bit ?

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #6 on: March 26, 2015, 10:14:48 PM »
Hi Essexboy! The computer infected is a Dell, Windows Vista,  had at the time of possible infection Malwarebytes Premium and Avast Premier 2015. I can not remeber if is 32 0r 64 and at the moment I can not check that as the screen continues to be for the last 2 hours all white with light blue border and the mousse symbol is circling continuosly...
Should I turn it off and on manually by pressing the Power button? it has been on since yesterday...

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #7 on: March 26, 2015, 10:36:22 PM »
Yes turn it off I will give links for both 32 and 64 bit, but try 32 bit first.  Links sent by PM
 

Download the following three programmes to your desktop :
 
 
1.  Rufus 
 
For 64bit systems  
2. Windows Vista 64bit RC
3. Farbar Recovery Scan Tool x64 
 
For 32bit systems
2.  Windows Vista RC
3. Farbar Recovery Scan Tool  
 
 
Insert the USB stick Then run Rufus
 
Select the ISO file on the desktop via the ISO icon. 
 
Press Start Burn

Then copy FRST to the same USB   
 
   
 
 
 
Insert the USB into the sick computer and start the computer.  First ensuring that the system is set to boot from USB 
Note: If you are not sure how to do that follow the instructions Here
 
Windows 7 and Vista screenshots 

When you reboot you will  see this.
 Click repair my computer  
 
 
Select your operating system  
 
 
Select Command prompt 
 
 
At the command prompt type the following  :
 
notepad and press Enter
The notepad opens. Under File menu select Open
Select "Computer" and find your flash drive letter and close the notepad. 
In the command window type e:\frst64.exe  or  e:\frst.exe dependant on system
 and press Enter 
Note: Replace letter e with the drive letter of your flash drive. 
The tool will start to run. 
When the tool opens click Yes to disclaimer. 

Press Scan button. 
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
 

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #8 on: March 26, 2015, 10:49:59 PM »
Thanks! I will do that. Is it safe to reinsert the USB I have already inserted on my contminated PC, on my laptop again or should I get a new one?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #9 on: March 26, 2015, 11:03:18 PM »
No need for a fresh one as Rufus will wipe the drive before it copies the boot data to it

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #10 on: March 26, 2015, 11:08:18 PM »
OK! should I use:
Rufus 2.1 (788 KB)  or
Rufus 2.1 Portable (788 KB)

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #11 on: March 26, 2015, 11:14:17 PM »
when I inseted the USB on my laptop, MCShield run and said it was infected, but stopped it. This is what the note pad showed in case it helps:


MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

>>> v 3.0.5.28 / DB: 2015.3.23.1 / Windows 7 <<<


3/26/2015 3:10:30 PM > Drive E: - scan started (KINGSTON ~15262 MB, FAT32 flash drive )...

>>> E:\autorun.inf > Legitimate file.

> Resetting attributes: E:\urDrive < Successful.


=> Hidden folders    : 1/1 unhidden.

____________________________________________

::::: Scan duration: 15sec :::::::::::::::::
____________________________________________

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #12 on: March 26, 2015, 11:23:25 PM »
I used the Rufus Portable, as the other did not work...
« Last Edit: March 27, 2015, 12:27:30 AM by jokera »

REDACTED

  • Guest
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #13 on: March 26, 2015, 11:49:32 PM »
Hi, I used the Rufus portable download and pressed start and this is what showed up - attached file for Rufus screen shot and warning screenshot. Even thou I made sure it looks like the screnn shot you sent me...
Should I uncheck : Create a bootable disk...
and press start again?
I am confused....

 I do not see : Select the ISO file on the desktop via the ISO icon.
As I do not see any ISO on my desktop.... where will it be..?

So I guess I am stuck on the warning showed in attachment Rufus 5, as I have no idea of what to do next...
So sorry that I am so inexperienced with this stuff... it is probably simple. but...

« Last Edit: March 27, 2015, 12:23:06 AM by jokera »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Possible virus after clicking on Malwarebytes program update popup
« Reply #14 on: March 27, 2015, 01:35:23 PM »
Insert the USB stick Then run Rufus
 
Select the ISO file on the desktop via the ISO icon. 
 
Click the ISO image button and select the Vista RC that you downloaded to your desktop then press burn