Spyware Warrior

bigalbuddy

I tried to open and intstall a bonus software tool called The+Platnum+Approach.zip as an administrator and right after 75% of my decktop Icons were repalced with mozilla file icons and now the malware will not let me open any *.exe files or run any programs.. The malware just keep asking me if I want to save files to my computer that I have already saved. Firefox recomended that I run the Super Anti Spyware tech edition and that ran and discovered 99 suspicious file which I put in quarantine. The software did nothing to fix my current symptoms though. Also firefox just sent me an updated new version 9.0.1 but the malware won't let me install it.

Cypher · Posted: Fri Jan 06, 2012 9:14 am Post subject:

Hi bigalbuddy,
Can you give me some details about your computer.
Is it XP, Vista, or windows 7? I need to know so i can give you appropriate instructions.
_________________
Admin/Teacher at Malware Removal University
Member of...

bigalbuddy · Posted: Fri Jan 06, 2012 3:39 pm Post subject: Operating System

It is Windows Home 7

Cypher · Posted: Sat Jan 07, 2012 2:58 am Post subject:

Hi bigalbuddy,
Ok lets see if you can do the following.

Please download ComboFix from one of the following links.

Link 1.

Link 2.

Note: You must rename it before saving it... Rename it: Cypher.com. See images below.

**IMPORTANT !!! Save ComboFix.exe to your Desktop**
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
Double click on ComboFix.exe & follow the prompts
Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply

A word of warning: Neither I nor sUBs are responsible for any damage you may cause to your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper
_________________
Admin/Teacher at Malware Removal University
Member of...

bigalbuddy · Posted: Sat Jan 07, 2012 9:16 am Post subject: File saved

When I saved the download the diologe box let me enter Cypher.com as the name, but would not let me enter any thing in the save file as box. Also, the malware is not letting me access any *.exe files. It keeps asking me to resave already saved files. I am guessing here but it looks like the malware has already disabled my AVG UI and .exe files because the sys tray icon has disapeared and when I right click to disable the anti virus in the start menu there is no option showing to disable the software. the diologue box does give the option to open, but when I click on that the malware asks me if I want to save it again.

bigalbuddy · Posted: Sat Jan 07, 2012 9:27 am Post subject: File saved

Sorry about the double post my screen went blank when I hit post for 10 minutes and I thought it did not go through. P.S. I saved Cypher.com to my desktop and when I tried to open it. the malware asked me if I want to save it again.

Cypher · Posted: Sat Jan 07, 2012 12:46 pm Post subject:

Hi bigalbuddy,

bigalbuddy · Posted: Sat Jan 07, 2012 12:55 pm Post subject: my computer

64 bit

Cypher · Posted: Sun Jan 08, 2012 2:54 am Post subject:

Hi bigalbuddy,
There are a limited amount of tools we use that will run on 64-bit systems.
The only solution to this problem may be to reformat your computer, let me check something with my colleagues and i will get back to you ASAP.
_________________
Admin/Teacher at Malware Removal University
Member of...

Cypher · Posted: Sun Jan 08, 2012 8:10 am Post subject:

Hi bigalbuddy,
Ok lets see if this works.

Please download ExeFix.reg and save it to the root of the system drive C << Important:

Boot in to the problem account.
Double-click it and confirm the prompt to allow it to merge.

Once done reboot the computer then let me know if you can run .exe files now.
_________________
Admin/Teacher at Malware Removal University
Member of...

bigalbuddy

This tech friend of my brother gave me some tips and I think I was able to solve my problem. Thankyou so much for your help. I will reopen another thread if the problem comes back.

Cypher · Posted: Mon Jan 09, 2012 2:25 am Post subject:

No problem thanks for letting me know.
Good luck and stay safe.