Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Please help, I think I am infected with nasty malware

  • 07-09-2010 2:19pm
    #1
    doctor evil
    Closed Accounts Posts: 3,114 ✭✭✭


    Currently running in Safe Mode as this is the only one where I don't get the message

    Application Error

    'The Instructions at 0x7deb6cdb referenced memory at 0x7deb6cdb the memory could not be 'read'

    'Click ok to terminate this program'

    When I do click it/try to close it nothing changes but the sign on the top RHS goes from reader_sl.exe to another one such as apdproxy.exe

    A few more are wmiprvse.exe wuaucit.exe lsass.exe Am I right in thinking these are malware?

    Directly behind this sign a superantispyware sign pops up and says it has encountered an error, click to send an error report. A new sign pops up saying computer will shut down and restart, any unsaved data etc etc

    I managed to move the sign one time and it said 'system process c:windows/syst32/lsass.exe terminated unexpectedly status code -1073741819 system now shutting down and restarting.

    I scanned with malwarebytes and superantispyware both in safe mode. I did find stuff and these were duly removed.

    I don't know what else I can do. Any help greatly appreciated.

    Going to try to update the two above in Safe Mode (I assume this can be done)

    Thank you!


Comments

  • #2
    bhickey
    Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    doctor evil wrote: »
    Going to try to update the two above in Safe Mode (I assume this can be done)

    Yes that should be fine in safe mode with networking (for Malwarebytes anyway).

    After running all your scans and while still in Safe Mode, run 'msconfig' and disable any of the Startup items that you think aren't absolutely critical on startup.

    Also download, install and run Ccleaner while in Safe mode.

    Then see if after all that you can at least start Windows normally so that you can work on getting a decent antivirus program like MSE (Microsoft Security Essentials) loaded.

    None of the programs you mentioned look like anything to freak out about but there's probably just a load of crap trying to load on startup and it might help to stop these trying to load until you can get control over things.


  • #3
    kmick
    Registered Users, Registered Users 2 Posts: 3,375 ✭✭✭kmick


    Just use system restore and restore back to an earlier period. Its never failed me and even my technophobe cousin can figure out how to use it.

    System restore in safe mode.
    http://support.microsoft.com/kb/304449


  • #4
    doctor evil
    Closed Accounts Posts: 3,114 ✭✭✭doctor evil


    Thank you bhickey,

    I can msconfig and unticked 3 yokes that I knew didn't need to be activated when the computer is turned on. I downloaded ccleaner as it seemed to have cleared things up a bit.

    I have updated malwarebytes and superantispyware, are these adequate for internet protection? I just did a scan with mwb and it found 3 rootkits. I have been getting popups about setting microsoft antiphishing program, I don't know if it is legit. It hasn't come up since the last malware was removed and computer was restarted.

    I have some slightly daft questions:

    Is rebooting/restarting the same thing

    Is it better if the modem is turned off while doing malware scans or does it make a difference.

    How do I know what is a normal amount of info being sent when I check the status on the local internet connection icon. Sometimes the tower beside the desktop makes a top of noise esp when the machine is turned on. Is this normal?

    Thanks


  • #5
    doctor evil
    Closed Accounts Posts: 3,114 ✭✭✭doctor evil


    kmick wrote: »
    Just use system restore and restore back to an earlier period. Its never failed me and even my technophobe cousin can figure out how to use it.

    System restore in safe mode.
    http://support.microsoft.com/kb/304449

    Hello kmick

    I didn't do this as (far as I understand it) I do not have a previous point in time saved/marked that I could revert back to.

    Open to correction!


  • #6
    bhickey
    Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    doctor evil wrote: »
    I have updated malwarebytes and superantispyware, are these adequate for internet protection?

    The free versions of Malwarebytes and SuperAntiSpyware are normally used just to run the occasional scan and wouldn't be of any use for ongoing realtime protection. Keep Malwarebytes and uninstall SuperAntiSpyware entirely. Then download & install a good antivirus program (I'd recommend Microsoft Security Essentials) if you don't already have one installed? Do NOT however have 2 antivirus programs running at the same time.


    Is rebooting/restarting the same thing

    Yes

    Is it better if the modem is turned off while doing malware scans or does it make a difference.

    Not important. Actually some programs will need to check for updates so best to leave it connected.

    How do I know what is a normal amount of info being sent when I check the status on the local internet connection icon. Sometimes the tower beside the desktop makes a top of noise esp when the machine is turned on. Is this normal?

    Absolutely no idea! Just keep doing what you're doing for now.


  • Advertisement
Advertisement