It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
deshadow52: also when that Internet explorer window popped up I couldn't really do anything so I had to log out and that's when it went back to semi normal.
You now have your IE set to a proxy server that won't allow you to use the browser till you agree. They don't want you to go online . . . just to buy their crapware.

What is the name of the program?
ok any idea how to make it go back to normal? or do I have to put it back to normal by hand?
avatar
deshadow52: also when that Internet explorer window popped up I couldn't really do anything so I had to log out and that's when it went back to semi normal.
avatar
Stuff: You now have your IE set to a proxy server that won't allow you to use the browser till you agree. They don't want you to go online . . . just to buy their crapware.

What is the name of the program?
I forget and it is gone
Post edited January 30, 2012 by deshadow52
avatar
deshadow52: I forget and it is gone
Oh well, if it pops back up . . and it should if it's still there . .. write the name down and look for the uninstall on Bleepingcomputer.com

Here is a link to the version that is most often found these days. Good luck . . . =)
I may have something that helps in the C:\ drive there is a file called BOOTSECT.BAK date modified 04/02/2009 1:44 AM and it is a BAK file that is 8 KB
actually I think that is nothing
Post edited January 30, 2012 by deshadow52
avatar
deshadow52: I may have something that helps in the C:\ drive there is a file called BOOTSECT.BAK date modified 04/02/2009 1:44 AM and it is a BAK file that is 8 KB
I have that file, too, on this uninfected PC. Don't sweat it.

In cases where I don't know what a file or process is, I search for that file name and read what comes up. This file seems to be innocuous.
Bootsek.bat is a backup of your boot sector, usually this appears when you do an upgrade from one OS to another and it backs up the origional with old OS incase you want to roll back an installation of Windows :

"When Vista Setup runs, it reads the boot sector and, if it finds a previous
version, copies it into a new file in the Root of the System Partition
(\BOOTSECT.BAK) for safekeeping until it is needed to boot the previous
operating system. If you create a dual-boot system, then each time you
reboot, the Vista system starts and gets to the operating system menu. If
you choose Vista, it continues through the BCD process. If you choose the
previous version of Windows, then BCD steps back out of the way and loads
BOOTSECT.BAK, which finds NTLDR and presents the WinXP-style menu from
Boot.ini."

http://www.microsoft-questions.com/software/aspnet/28939510/bootsectbak.aspx
avatar
deshadow52: I may have something that helps in the C:\ drive there is a file called BOOTSECT.BAK date modified 04/02/2009 1:44 AM and it is a BAK file that is 8 KB
actually I think that is nothing
Usually these programs don't install themselves in the boot sector. It has installed a process / files that blocks certain actions by you and nags till you agree to purchase the "fix" for your problems. Rebooting just initiates a "run" command for the processes.

At least none that I have removed so far has been installed in the boot sector. Once you get the process stopped . . . the infection can be removed but it may take some time to run down all of the files it installed and remove the proxy server from your browser.
If you're not really sure what you're doing and by that I mean being an IT guy, and it sounds like you aren't, at this point I'd recommend backing up your data and reinstalling the whole system. It's not that these things can't be cleaned, it's not even that hard, but unless you know how you way around the system you've probably left some traces of it around and some things might not work like you expect. Cleaning programs don't do a perfect job either.
Anyway, don't use Internet Explorer if you can help it, it's the most common cause in my experience. Outside of users voluntarily allowing the malware to "scan" the PC.
You might find that some documents are missing too, just like the desktop links. Usually the files aren't missing, they are just marked as hidden/system. Maybe even files from Program Files and Windows. In that case it's a bitch to get the system back to normal and relatively secure, reinstall is easier.
well I'm in safe mode at this very moment and malware bytes is scanning, hope this works.

EDIT:3 problems detected so far
Post edited January 30, 2012 by deshadow52
avatar
Ubivis: What I can suggest is running Spybot on your system to not even get this stuff installed accidently:

http://www.safer-networking.org/en/index.html

This Tool is freeware and available for so many years helping you make your system more bulletproof by cleaning your system from tracking cookies, fixing security holes in IE and Firefox and many more stuff.
Yeah, I put this on my fathers pc. A lot less maintenance since then ...
avatar
deshadow52: well I'm in safe mode at this very moment and malware bytes is scanning, hope this works.

EDIT:3 problems detected so far
Dude, scale down on that midget porn! ;-P
Post edited January 30, 2012 by SimonG
avatar
deshadow52: well I'm in safe mode at this very moment and malware bytes is scanning, hope this works.

EDIT:3 problems detected so far
Sometimes running MalwareBytes alone will not clear the infection. Hopefully it will but . . if not . . . and you find the malware still installed on reboot . . . write down the name of the program as it will be easier to find the removal steps if you know the name the malware is calling itself today . . . =)
avatar
deshadow52: well I'm in safe mode at this very moment and malware bytes is scanning, hope this works.

EDIT:3 problems detected so far
avatar
Stuff: Sometimes running MalwareBytes alone will not clear the infection. Hopefully it will but . . if not . . . and you find the malware still installed on reboot . . . write down the name of the program as it will be easier to find the removal steps if you know the name the malware is calling itself today . . . =)
ok will do thank you very much.
avatar
Ubivis: What I can suggest is running Spybot on your system to not even get this stuff installed accidently:

http://www.safer-networking.org/en/index.html

This Tool is freeware and available for so many years helping you make your system more bulletproof by cleaning your system from tracking cookies, fixing security holes in IE and Firefox and many more stuff.
Just don't run immunization if using IE. In addition to the immunization providing next to no real protection anyway, IE cannot handle such a vast exemption list which slows IE down.
Post edited January 30, 2012 by Kabuto
http://quick-heal-total-security.software.informer.com/

is that it?
avatar
deshadow52: ok will do thank you very much.
You're welcome .. .=)

Your icons and files may still be missing since mb doesn't address that problem AFAIK. If icons and files are still missing and the infection is gone you might try using the unhide.exe to fix that problem in one easy step. Download from the link above and run. I have used it several times with excellent results . . . = )

Edit: if your OS is Vista / Win 7 be sure to run it as an admin by right clicking the unhide.exe and clicking "Run as an administrator" on the resulting dialog.
Post edited January 30, 2012 by Stuff