Need urgent help, System failing right now.

C

christophersem

New Member
So my computer was working fine this morning, then my internet browser (opera) suddenly closed with all my things still up, so i re-opened it with all the previous tabs still open and it shut down for a second time... this time, my computer suddenly had a "Hard Disk Failure" and closed down EVERYTHING I had open then the screen went black for a bit.. and all my icons had dissapeared and returned differently and missing a very big majority of the icons on my desktop and under my windows "start" button.

Then a "SMART HDD" window opened up saying I had 7 total errors that are dangerous and critical.

I googled the problem and found a different forum from this site from 4 years ago and took some of the advise that was on the page. I downloaded Malwarebytes and scanned my computer... It found two errors and I clicked the "remove selected" button to get rid of said errors.

I then downloaded Hijackthis, but i haven't really done anything with it, it said there was a problem with trying to scan my computer and said it might not be able to fix the problem and then showed me a large log of results that I don't know what to do with...

Someone please help, I don't want to lose everything on my computer.
 
You are infected. Follow the instructions in the thread linked below and post your logs in this thread when completed. Do not run any temp file cleaners until told to do so. If you do, you will lose the ability to get your icons and programs back.

http://www.computerforum.com/131398-important-please-read-before-posting.html

Make sure you run the rkill program before running malwarebytes. I will follow with more to do once I get home from work.
 
Last edited:
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 03/30/2012 at 9:46:26.
Operating System: Windows 7 Home Premium


Processes terminated by Rkill or while it was running:

C:\ProgramData\QHsDn9o7JizDcf.exe


Rkill completed on 03/30/2012 at 9:46:38.

-------------------------This is what I got as rkill's log.-------------------------------

---------------------And this is from Malware Bytes:----------------------------------
Malwarebytes Anti-Malware (Trial) 1.60.1.1000
www.malwarebytes.org

Database version: v2012.03.30.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Chris :: CHRIS-PC [administrator]

Protection: Enabled

3/30/2012 7:45:08 AM
mbam-log-2012-03-30 (07-45-08).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 197079
Time elapsed: 7 minute(s), 38 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
 
Malwarebytes terminated the two "infections" stated above... and I don;t experience any trouble with searching things on the internet

I've just checked to see if my programs are running... and the remaining ones are... The thing is that I'm not sure whats all missing, but i know for sure that it is. I checked my memory space on my HDD and there are now 38.5 gigs of memory free and last i checked, i only had around 10 gigs left on that HDD.

My icons are still missing except for the ones pinned onto my taskbar, they all seem to work besides photoshop. But oddly enough, they are behaving differently also... Before when i opened a program it would just light up its little perfectly shaped box around them and light up, now it enlarges it making it about double the size it used to be and inserting text into the space... everything takes up my entire taskbar and its a bit irritating. . .

I hope i didn't screw anything up and make myself not able to get my things back, If I have, please help my salvage whats left of my programs.
 
I've downloaded "unhide" and it made the programs on my start up panel visible... but the other options are still not showing up, by other options i mean the Control Panel, My Computer, Documents, etc. that is supposed to show up also.
 
The program unhide told me to disable security and spyware protection that may have interfered and try again... So I did and nothing else had change... unhide then directed me to restart my computer. Should I do this? I'm a bit weary of turning my computer off because things are still a bit skewed.
 
You can restart your system with no worries. Right click on your desktop and click personalize i think. In there, you should see where it says change desktop icons. Make sure the icons you want are checked.
 
So, I just restarted my computer... but now everything is gone again... well not everything, my desktop items are still visible, but all my programs pinned to my taskbar dissapeared and now i just got a bunch of messages saying "System Error- Write fault error" Oh and the SMART HDD program showed up saying I have the same 7 errors again... Should i repeat the process i went through yesterday?
 
-----------------------------This is rkill's new log-------------------------------------
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 03/31/2012 at 8:46:56.
Operating System: Windows 7 Home Premium


Processes terminated by Rkill or while it was running:

C:\ProgramData\LurGImdondG.exe
C:\ProgramData\QHsDn9o7JizDcf.exe


Rkill completed on 03/31/2012 at 8:47:05.

--------------------And this is from Malwarebytes------------------------------------
Malwarebytes Anti-Malware (Trial) 1.60.1.1000
www.malwarebytes.org

Database version: v2012.03.31.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Chris :: CHRIS-PC [administrator]

Protection: Enabled

3/31/2012 8:50:15 AM
mbam-log-2012-03-31 (08-50-15).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 196590
Time elapsed: 3 minute(s), 57 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|LurGImdondG.exe (Trojan.Fakealert) -> Data: C:\ProgramData\LurGImdondG.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.

Folders Detected: 0
(No malicious items detected)

Files Detected: 3
C:\ProgramData\LurGImdondG.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\ProgramData\QHsDn9o7JizDcf.exe (Rogue.FakeHDD) -> Quarantined and deleted successfully.
C:\Users\Chris\AppData\Local\Temp\ggE9MgB6qoHr5J.exe.tmp (Trojan.Fakealert) -> Quarantined and deleted successfully.

(end)

And this time Malwarebytes told me to restart to get rid of these infections properly. I don't remember it telling me to restart last time, So I will this time, i guess.
 
Also, I've just noticed the free-space on my HDD is progressively getting bigger... It is now at 42.6 gigs of free space up from the 38.5 gigs yesterday... Which means i'm losing things right? I'm just not sure whats disappearing just yet, the only thing thus far that I've noticed to be gone is Internet Explorer, but i'm sure theres more.

Now, I ran rkill and malwarebytes right after the restart just to make sure there isn't more, and according to these two there are no more things found... but it said that last time, so... any advice?
 
On your latest malwarebytes scan it has detected the rogue software and removed it, the previous scan didn't detect it. What issues are you still having?

Getting more free space could result from getting rid of any infections you have. Doesn't necessarily mean you are losing your data.
 
well, there are no problems besides the memory now, I haven't restarted since this morning after Malwarebytes told me me to do so. I'm just concerned because i have two HDDs on my computer, one with 154 gigs and the other with 419 gigs, the one with 154 gigs was almost full and only had like 9-10 gigs left, now its at around 40 gigs of free space, I'm concerned because thats a large ammount of memory and it couldn't have been all infections, could it? other than that everything is fine, i just have to reset everything to the way i want it.
 
You need to restart your system so malwarebytes can fully remove those infections it found. So all your icons and start menu items are back now? I would still highly recommend running combofix in safe mode. Also can you post a hijackthis log for me.
 
Be smart and FIRST backup ALL your important data to an external HDD using Linux Ubuntu and NOT Windows.
After you have done that,be sure that an external HDD is unplugged and then scan your Windows computer as much as you want to without the fear of loosing anything.

Don't wait believe me.
 
You must log in or register to reply here.
Back
Top