A possible Virus

[LesPaulShredder]

Hey guys I really need some help. For the past 2 days my computer has been under virus, trojan, adware, etc. attacks like crazy. Luckily I have PC Doctor and got rid of them... or so I thought. I woke up this morning to go to my computer and 15 windows of adware was open along with an ominous change in layout (i.e. background, toolbar). Everything according to PC doctor is gone but my computer has a message saying "VIRUS ATTACK" in the bottom right hand corner next to the time and date. For some reason I'm not able to access my C or D drives nor am I able to act as the administrator. My task manager has been "disabled" and I'm unable to log out or change users. Does anyone know how to help or what I should begin to do?

PS.- I'm not the most advanced user of a computer, so I'm going to need basic language help

 

[law9933]

Did you try Safe Mode? Run AV & your other scanners. SUPERAntispyware (updated) is a good one.
Posting a HijackThis log if possible could get you some help.

 

[Modelworks]

Go to start, Run, type in msconfig, select the startup tab, uncheck everything there, reboot.
See if that gives you enough control over the pc to be able to access your drives again.

 

[LesPaulShredder]

To Modelworks...
My Start menu doesn't have that option. Apparently my "administrator" has disabled this to. Almost everything except iTunes and the internet is blocked. The weird part is is that I am the admin. on my computer and their are no other profiles to sign in on.
And to law9933...
Whenever I go into safe mode all I have is a black screen... how do I do anything?

 

[LesPaulShredder]

ok so I went into safe mode and disabled everything at startup and the normal is still there. Whenever I open my start menu in normal mode only 10 of my programs are in the normal trays and that little tab that has "all programs" is not there at all. Please help someone!

 

[bruceb]

At this point you really only have 2 options.

1): Remove the drive and slave it in another
computer and try to run Antivirus / Antispy / Antitrojan
programs (in safe mode again)

2): A complete drive wipe and reinstall as your system
has been compromised in many ways. Personally, I
think this is your best choice. Hope your personal data
is all backed up.

 

[robisbell]

sounds like ransomware in action. no way to undo it if it is, since they 1024 encrypt it and makes the drive pretty much useless unless you pay them, or pay someone to brute force the encryption.

 

[LesPaulShredder]

So when I went into safe mode I can access everything but I honestly don't know what to do. I've had my basic form of Norton remove things and PC Doctor Remove things but still no change in regular mode. Is there really no hope? I really don't have the money for another PC

 

[law9933]

This free program is a major malware remover, with the help of a trained adviser
You copy & paste the log it creates in the right forum.

http://www.trendsecure.com/por...urity_tools/hijackthis

This forum rarely fails to fix a PC malware problem, usig HJT.

http://forums.pcpitstop.com/index.php?showforum=25

Use Safe Mode with Networking to get it accomplished.

You would not need a new PC, only a OS after wiping the HD clean.

 

[pyonir]

My parents computer had the same issue. I tried numerous things i found online over the course of two days, and couldnt get rid of it. I had to reformat their drive. I would recommend that...and save yourself the headaches.