[intorkercet]

I got this when i did a scan and I clicked to fix it but it doen't fix it so what to do next?

[intorkercet]

that really didn't come out how i wanted but thiers two files that are cryp_Mangled and you can fix it but I go to fix it and it comes back not fixed, so what to do?

[Enliseell]

1st try a system restore if it will let you if can't restart pc and press f8 like crazy to see a black screen with safe mode on top.
Use your arrow keys to to go to safe mode with networking.
Press Start
All programs
Accessaries
System Tools
System restore.

This is what is called ransomeware not really a virus but like your finding out has your pc controlled. System restore is a easy way to remove it as long as it isn't controlled. Most of the time in safe mode the ransomeware isn't turned on so you can kick it out. Some are a pain in the !@#$%^.
Thats where Combofix comes to help which you may need so here is the link http://download.bleepingcomputer.com/sUBs/ComboFix.exe.
It a 50 stage process that works wonders just agree if it says your secruity is running. The program expires after a while so if yaa need it again save the link or stop back here.

[intorkercet]

I ran the combofix and it deleted an autorun and a file in the recycle bin. It was a surprise to see that trend mirco found something, I scan my computer everytime before I go to bed and I wake up to see this.

[intorkercet]

htt p://itsallbreaksoft.net/tds/in.cgi?3 wordpress virus is something that would attack my coumputer or just hack into websites and forward then to the web address I listed? i just did a web search for the production # of ferrari 16m and I clicked on a website then i got the above address in my google bar. I reset my IE browser before that happened.

[intorkercet]

I had another cryp_mangled file it was adobe, trend micro quarantine it, then cleaned it and found no virus ,I left it in quarantine. then after security essentials found something then asked to clean it, i clicked clean it did. I did combofix, did I just found damage that was done or do I still have a problem?

[kuzbaslachek]

Dude, did you do a restore like craigd told you to do? Do it.

[intorkercet]

couple days back I had the same Issue I stated at the beginning. I go to this website as im their in the upper corner I see an add for insurence for racine. I thought to myself that doesn't seem right, seconds later my browser goes from the page I was viewing to my C and D drives loading full of virus and infront of that is a box that says that my computer has the signs of virus and malware, then when I x it out then a the permission to download box comes up. It seems that the website I was on foward me to this issue. I went back to the site while running trend micro and the insurence ad was gone and no problems. Trend micro finished and found nothing. So couple mins ago I had a premission to download box of something i didn't know.
So spybot, trend micro, and malware bytes all come up clean. So is there a virus, malware, etc that could only be found when running or corrupt my anti virus from finding the problem? I believe that there is a problem but I search and find nothing. The website this happens on is a mens website which is a magazine like playboy and is a legit website. its called nuts magazine just google it (nsfw) and I haven't had these problem in the past on that site so thats why i beleive its my computer and not the site but I know little about computers. Thanks for the help.

[kuzbaslachek]

Print screen and post pictures of what is happening. I have a feeling you're just seeing popups of fake viruses making you think you have viruses so you buy their shit software. A lot of so called legit websites will still hand down viruses I.E. Facebook.

[intorkercet]

how do you do a screenshot or screen print? And i'll do that next time and post it up

[Bromikka]

Maybe try Geek Squad? They have pretty sweet Beetles...lmao Haha

[kuzbaslachek]

Print Screen is right next to your Scroll Lock on the top right hand side of your keyboard. Hit it once when you want to snap shot the screen. Go into Word or Paintbrush and Paste it with Ctrl V or Edit, Paste.

[Enliseell]

Now we're running into dual securities so both will fight each other thus bug win's....for the moment. I'd try disabling Trend Micro and see how things run just make sure its vault is empty 1st.

[intorkercet]

I did do a system restore. Trend micro has 3 virus in quarantine that I haven't been able to get clean.

[kuzbaslachek]

Format! lol start over

[intorkercet]

As of lately I have been getting , htt p://d.xp1.ru4.com/um?_r=1, http ://cm.g.doubleclick.net/pixel?nid=xplusone1, it goes in my google I guess google tool box or google search in the upper leftside below the address bar(I think thats what its called). This has been very annoying that every time I go to a car forum example Fchat it fowards me to google and list the above with no search results.

Also last night I was surfing the web then out of nowhere I get forward to this thing were it says you have malwere and it shows downloading virus and etc. I paniced and ex it out and then it ask to cancel I believe, so from thier I got rid of it. my cumputer didn't crash nothing changed that I know. When this happend I was running a virus scan in the background while I was surfing the web, It showed only cookies removed.

Ok so I scanned again, and nothing just cookies. I am using trend mirco but my firewall is down because of a issue with internet connection but anti virus is up and malwere, etc. I do have windows vista firewall up and I ran windows defender and nothing. so i downloaded spybot to see if it could could find anything and it came back with nothing.

I do believe that I have an issue but I don't have the knowledge of computers to find the issue or solve my Trend Mirco firewall issue that I probably cause when I changed settings and did remeber what I did. I do want to add that I have 3 virus in quarantine that can't be clean and I don't know what to do with them so they are still in there.

I was thinking about taking my laptop to the geek squad but I don't know. Do you think it would be a good Idea or not?
Well thanks ahead and I hope reading this doesn't give you a headache my writing does have a tendencies to do that.

[Enliseell]

1st thing I'd try is resetting your browser
if it's Internet Explorer:

Either on the top right or left you see Tools click it.
Near the bottom click internet Options.
Far right in internet options click Advanced.
Near the bottom click restore shouldn't need to click reset home page but I usually do anyway.
What this does is reset the browser setting to default and removes any tool bars only gripe is you will have to retype user name info on sites for a short while.
See how quiet things are afterwoods. If yaa need help putting back your home page let me know.

Thare are alot of these "Fake Antivirus's" What they do is tell you all these problems and hope you believe them and pay for them.
One quick way of removing them since their basically a program is doing what is called System restore.
System restore puts your PC back to when it worked best last. If you see anything that is telling you things try this. Let me know if you don't know how to do a restore happy to add that here too.
Go by your gut feeling usually that is right on.
What I use most of the time to remove fake antivirus's maulware trojan's etc that is free and can be your soul security is Microsoft Secruity Essentials http://www.microsoft.com/security_es...s/default.aspx
I have a host of software that is free and works well http://www.darnickcorppcs.com/software/software.html

[kuzbaslachek]

You have spyware - DO NOT CALL ThE GEEK SQUAD. They will rip you a new one and your problems are easily fixed.

craigd has the easiest solution. If you can remember when your computer was working properly you can restore it to that point pretty easily, specially in XP - because I just had to do it, it took maybe 15 minutes and poof - my spyware was gone.

Otherwise you could try downloading Malware Bytes - and run it. Usually it will clean mot spyware - Ive had instances where the spyware is so advanced it knows you are trying to install Malware Bytes and it actually deletes the EXe file.

There are a milllion places that offer spyware cleanup I would only recommend 5% of them and GEEK SQUAD is not one of them!!

[intorkercet]

Thanks guys for the help. I resest the browser and now I'm running malwarebytes (free download) so i'll see what it finds. If I have anymore questions I'll be sure to post them up.

[Enliseell]

No problem. Let us know what yaa find too.