Got rid of the worm, but it left a nasty afertaste. Need help with infected computer.

[The Backlash Cometh]

I think I fell victim to the win32 worm. It may have been on my computer since Christmas. Something buggy has been going on with my Trend Micro Internet Security since than, and also with and IE update. I don't even know why I updated it, since I never use it, but nothing has been the same since then.

For a while, changing over to Mozilla seemed to work, but slowly that got overtaken. It was a pain trying to go around all the different obstacles, like a mouse that wouldn't double click, and webpages that steadily became less accessible. Finally, I went out and bought the Kaspersky Internet Security 2010. As I tried to install it, An advertisement for Microsoft Internet 2010 tried to take over, warning me that my computer was being attacked by a remote computer. I kept getting pop up windows throughout the installation. The only thing I managed to do was get the Kaspersky to scan my computer, but the disk was a July 2009 disk and considered obsolete. After the scan finalized. I managed to get on the internet to download the current list and when that was done, a pop-up window said I had to reboot the computer.

So, I reboot the computer and everything looked fine. Made it to the log in screen. Typed in my password and it looked like it was going to go through but, I got kicked off by the "administrator." Basically, I can't get back in to scan using the updated Kasperky black list.

Anybody know how I can get around this? It accepts my password, but once in, the "administrator" boots me out.

[travelingtypist]

1. Try this.

Either go by what they did or post your own.

http://www.cybertechhelp.com/forums/showthread.php?t=205492&highlight=win32

[The Backlash Cometh]

3. Way over my head.

Wouldn't even know where to begin since I can't get past the login.

[travelingtypist]

7. Reboot, hit F8, safe mode.

This should bypass the administrator and get you in at least.

Post your story at CyberTech Help. They'll walk you through the fixes step by step.

[The Backlash Cometh]

8. Gotcha.

I got to the Administrator login through safemode, but it won't let me go beyond that. Same thing happens.

I'll give CyberTech a shot.

[CK_John]

2. You've reach a point that I don't usually recommend, but... from your previous posts, you need to

pull the hard drive. Put it in another machine as a slave or with an adapter, scan (full) with malwareBytes and a valid antivirus program (such as avast or Microsoft Security Essentials), save your data, reformat your HD and recover back in your original machine.

[The Backlash Cometh]

4. This one is a nasty bugger.

I can't even get into the Administrator.

However, I might scrap my computer before resorting to the things you suggest. Don't have the extra computer to play with, and I won't take it to a Geek squad.

Whatever happened to buying a current disk that will boot the computer up and scan it from outside? I thought might Kaspersky would have that capability, but it really doesn't matter since it's an "obsolete" disk. Frankly, I think the Internet Explorer 2010 was part of the problem. Almost like it demanded to be used.

[CK_John]

9. There is no IE2010. and any backup files you made in the last few days need to

scrubbed clean before you just reinfect your computer. You need to take your HD out and get it scrubbed or buy a new one on ebay of same type IDE or Sata and recover from scratch.

Do you have any tech savvy kids around that can help, "geek squad" are basically sales staff.

[The Backlash Cometh]

10. My geek went back to college.

Oh, how he's going to love this call from his mother.

I think it was called Internet Explorer Security 2010.

[CK_John]

12. Ask him to recomend somebody still around that he knows can help.

[The Backlash Cometh]

11. Oh, about scrubbing my backup disk.

Once I start over with a clean HD, it's just a matter of using the Kaspersky to scan the drive. Right?

[CK_John]

13. You keep fighting to use things that are suspect. Use MalwareBytes I have said about a dozen times.

[The Backlash Cometh]

14. It's an awakening.

If I get a second chance, I'll follow your original advice.

Thank you.

[canetoad]

5. Stop wasting time

Get your personal stuff off the drive and reformat.

I'm sick to death of reading rescue stories. Doubly tired of folk who pay no attention to the most basic measures to ensure their data integrity who come complaining that they are about to lose everything.

Here are the steps you should follow:

1. Move your personal data to another drive
2. Reformat the current C drive
3. Add an E or F drive to store your personal data
4. Reinstall ONLY the operating system and programs to your newly formatted C drive
5. If necessary, restore your personal data to new partition
6. Check the integrity of the transferred data
7. Install all the woo-woo safety measures that make you feel safe. Make a restore point and practice safe surfing.

I'm really sorry, but my patience is worn out by folk who will not invest the few minutes it takes to diagnose and troubleshoot their own faults.

Stop whinging, back up your data and clean your machine up.

[The Backlash Cometh]

6. I'll keep this information handy, thank you.

However, if you read the original post, I can't get into my computer, therefore will not be able to retrieve information. Fortunately, I had made a backup of important files a few days ago so I won't have lost much.

Also, I believe my problems began because of updates. The updated IE interfered with my update of my Trend Micro.

I have been UPDATING my computer since Christmas, thank you. And also cleaned the files. So, if I made any error at all, it was in thinking I had solved the problem. In fact, I should have switched Internet Security software last week. That might have made a difference.

[pokerfan]

16. Can you boot from the optical drive?

So, I reboot the computer and everything looked fine. Made it to the log in screen. Typed in my password and it looked like it was going to go through but, I got kicked off by the "administrator." Basically, I can't get back in to scan using the updated Kasperky black list.

It sounds like you should be able to do so. If so, then you can do the following:

1. Using another computer, download and burn a live CD version of Linux (http://www.ubuntu.com/">Ubuntu or http://www.sysresccd.org/Main_Page">SystemRescueCd for example).

2. Boot from this CD.

3. Attach an external drive.

4. Use one of the file management tools to copy your files to the external drive.

[MyNameGoesHere]

15. Explain the Administrator boots me out?

Try logging on and HOLD the shift key until completely logged on. This usually keeps anything in the start up from running. Also you make the mistake that everyone does, DO NOT RUN A SUSPECTED COMPUTER IN NORMAL OR SAFE MODE. Get a damn live CD with avast anti-virus on it. This will run av without loading up crap that is infected. basically you are scanning a slave disk.

[The Backlash Cometh]

17. Live and learn.

It was time to start all over with that computer. I'll probably buy updated OS and Windows directly from the manufacturer just to make it easier.

[CK_John]

18. Unless your computer is fairly new (18 months) and has at least 2 GB of memory a new OS will

not be an option.

Do you have the restore disks or a recovery partition?

Why this drastic step, you seem to be online ok?

[The Backlash Cometh]

19. I'm on my laptop.

Loved the Malwarebytes, by the way. Actually, the Registry scan software that was recommended to be used beforehand was great too. I tested it on my laptop and I'm flying!

My desktop computer is dead for now. I managed to load the operating system, but I can't do the basic internet hook-up. Even the ISP guy couldn't get through because its an old XP version. It probably involves loading a driver -- not sure. Tomorrow I'm going to try to contact the manufacturer to see what they will say. I have the Operating System, Drivers and Applications disks that came with the computer. I only installed the operating system. I bet the answer is in one of the other two disks.

[hobbit709]

20. The drivers disk is the one you need.

Or go online with your laptop and go o the manufacturer website. Find support-drivers and downloads and enter your model number. Download them all to a flash drive and then put into your computer and run them.

[The Backlash Cometh]

21. Thanks!