+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Infected] Can't open any Antivirus and most software isn't working (/showthread.php?tid=4727178)
Can't open any Antivirus and most software isn't working - The Wizard of Dos - Mar 12, 2015
Welp this in fun. In a few hours I need to give a big presentation, pretty much my exam. And of course my computer decides to crap out right now, of all moments.
I noticed that my Google Chrome weren't working very well, so I restarted my computer hoping it would fix the problem. When I booted up again, I noticed that my computer behaved really weird. My MBAM process were running, but nothing showed up in my taskbar and I couldn't seem to restart it. Panda Antivirus (Free) weren't running neither. Then windows explorer started to behave really weird, crashing when I tried to do anything. I can't seem to open any software and MBAM Chameleon isn't working either.
I have now booted into safemode and stuff seems to be working, but it isn't exactly ideal for doing some crucial photoshop and powerpoint work I have to have done in a few hours. What do I do? I suspect this is some nasty virus with a really good crypter. What do I do?
Thank you.
* - obviouslyracist - Mar 12, 2015
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
- Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce a log called FRST.txt in the same directory the tool is run from.
- Please copy and paste log back here.
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
http://pastebin.com/ (separately)
* - The Wizard of Dos - Mar 12, 2015
Alright I scanned my computer with MBAM Pro, FRST and ESET Online Scanner (Yeah I know..). MBAM and ESET didn't find anything and here's the logs from FRST:
Edit:
Alright, I uninstalled Panda Antivirus and it fixed it. A few days ago Panda said one of its own files was infected. Something happened there, don't know what, though :/
* - obviouslyracist - Mar 12, 2015
Welp shiiiittt XDD
I am glad it is fixed.
If you want though, I can still submit the fixlist.txt for approval since there is a lot of crap that needs clearing up.
Also do you happened to used something called HomeGuard AMC?
sooo if you want me to clear up on the little things
can you give me the securitycheck log with your next post because you have outdated Javas.
http://www.bleepingcomputer.com/download/securitycheck/
thanks.
* - The Wizard of Dos - Mar 12, 2015
It would seems that this is what happened. Panda Antivirus accidently tried to eat itself lol
http://www.theregister.co.uk/2015/03/11/panda_antivirus_update_self_pwn/
http://www.engadget.com/2015/03/12/panda-antivirus-had-a-bad-day/
* - Retribute - Mar 12, 2015
(Mar 12, 2015 11:41 PM)The Wizard of Dos Wrote: It would seems that this is what happened. Panda Antivirus accidently tried to eat itself lol
http://www.theregister.co.uk/2015/03/11/panda_antivirus_update_self_pwn/
http://www.engadget.com/2015/03/12/panda-antivirus-had-a-bad-day/
Indeed.
Here is how to rectify the problem: http://www.pandasecurity.com/usa/enterprise/support/card?id=100045
* - The Wizard of Dos - Mar 13, 2015
I don't seemingly have any problems after I uninstalled it. I did previously restore to the latest known good configuration, which is probably why.
* - obviouslyracist - Mar 13, 2015
Wow this is a good way to start the morning.
🤣