So, I searched out more threads and have spent six hours or so reading and trying to fix and I think it is fixed. :)

buyorsell888,

Trust me, it is not fixed! I'm quite sure there is some nasties lurking in the back ground just waiting to present it's ugly head.

Please follow the link below to LandzDown, register, and then click on the Analysis and Malware Removal link. You'll then be directed to a page where you can click on Log Posting Instructions. Read the thread thoroughly, then start a new topic in the removal forum and post the logs. Give a full description of what happened as you did here or to make it easier, just post a link to this thread.

I'd like to give Corrine (the removal specialist) a heads up that you are on your way but if you don't follow through my time would be wasted.

Please follow through with this. I'll be watching for you to post. If you have any questions or concerns, please start a thread at LandzDown and the dedicated members will be more then happy to help guide you through whatever you do not understand. If scans won't run, so say, and guidance will be given according as to what to do.

Here is a link that might be useful: LandzDown

Forgot to mention, anytime this happens again...never click on the screen or try to X it out, always place your mouse over the taskbar at the bottom of your screen, right click, choose Task Manager then choose Applications tab, click on the application and End Task at the bottom. This may or may not prevent the malware from installing. Either way, always have it checked by a professional even if you think it hasn't installed just to make sure.

I will do this as soon as I've had a cup of coffee. I woke up really late with big migraine. :(

Thank you

oh most definitely go to the forum bbbluz has linked you to this infection takes more than what you did to get rid of it this is a bad one. The team at the LzD forum will guide you through using special scans and tools to make sure your pc is fully cleaned. This is not something you want to skip doing!

If you need help there just let me know I am there also.
Post your new thread in this area
Analysis and Malware Removal
Please only follow their instructions given to you to avoid any confusion or conflicts.

Sounds like you had this one,

HDD Repair is a fake computer analysis and optimization program from the FakeHDD family of rogues. See link for full description..

http://www.bleepingcomputer.com/virus-removal/remove-hdd-repair

The reason we ask you to get a more thorough check is this infection is known to be bundled with the TDSS rootkit infection. Some of the symptoms of that are Google redirects.

I have registered there as buyorsell888 and am running the scans now to post the logs.

I went to that forum last night after reading messages here advising others to go there and I did everything wrong by doing what they advised others to do without supervision :( I was so frustrated I didn't read thoroughly.

I knew the pop ups were fake from the first one but it hijacked my start menu, toolbar, quick start bar and I could not boot into safe mode. Control Alt Delete didn't work either.

I ran Spybot Search & Destroy after I posted here and it found several hijacking malware that it removed but my start menu doesn't lead to the programs. argh.

If you are infected with HDD Repair it is important that you do not delete any files from your Temp folder or use any temp file cleaners. This is because when this infection is installed it will delete shortcuts found in various locations and store backups of them in the %Temp%\smtmp folder. It does this so that you when try to launch a program from your start menu, none of your shortcuts will appear and thus making you think that your computer has a serious problem.

To further make it seem like your computer is not operating correctly, HDD Repair will also make it so that certain folders on your computer display no contents. When opening these folders, such as C:\Windows\System32\ or various drive letters, instead of seeing the normal list of files it will instead display a different folder's contents or make it appear as if the folder is empty. This is done to make it seem like there is corruption on your hard drive that is causing your files to not be displayed. It does this by adding the +H, or hidden, attribute to all of your files, which causes your files to become hidden. It will then change your Windows settings so that you cannot view hidden and system files.

Yes, that is what it did and I already ran CCleaner to delete temp files. :(

After reading the information above, I am positive that is what it was. I knew the very first alert was bogus but got it anyway...

Be sure you follow only the instructions given specifically for YOU since other people's problems may differ from yours. They are good and patient at LanzDown, so just be patient and follow instructions to the "T".

It is NEVER advisable to follow any instructions that are given to someone else ONLY those directly to you for your specific problem. If you did follow other directions please do mention that in your post at LzD.

I did mention it...Thanks

I had this virus and it is nasty. The great folks on Landzdown talked me through cleaning it out. Quite an experience.

Good luck and follow their instructions,

Jane

I was advised to run ComboFix and post the log which I did yesterday.

Unfortunately, I ran CCleaner and deleted temp files before I ever posted here.

I have restored icons to the quick launch toolbar but my start menu is toast and I'm not sure what to do about it.

Hi buyorsell888,

I can "feel" that you are frustrated with yourself for trying to fix this issue on your own before asking for help. Please stop kicking yourself. Even the best get flustered and jump into action when something like this occurs. It is a hard lesson to learn. But it will pass.

Continue to follow Corrine's advice and HER advice only. She will do what she can.

Hang in there with a smile!

DonnaB aka bbbluz

Yep it happens believe me. As Donna said with Corrine and the team helping you, well you have the best you can get on your side now, but it does take patience!!

I'd like to point out one more thing if I may.

Many people jump into action and run MBAM. That can also be a no no. Most don't realize that if you run a FULL scan there is a strong possibility that you'll clear out your restore points and have no points to go back to that may or may not help in a situation like this.

Please look at the link below. The last entry in that MBAM log refers to c:\system volume information\_restore Those are restore points. All her programs are gone because they were Quarantined and Deleted. Some times restoring back to a time will bring the lost programs back, the infection too, but the infection can be cleansed.

I'm not talking about programs that you installed yourself. I'm talking about programs that came with windows software and are a part of windows itself such as those in the System Tools folder. Even programs in your Accessories folder like Paint can disappear.

This is why we are so adamant about not trying to remove the malware of today on your own or follow anyone's advice unless they are trained. Today's malware is so advanced and there are proper steps to take to prevent disaster.

Those of you who think you are helping by giving advice should back off and do the right thing. Guide them to someone who is trained to remove malware. We all would like to think we know what we are doing, and many here do, but I have noticed a few that think they are computer nuts and know it all. I'm sorry to say....but you don't!

Here is a link that might be useful: Re: System Repair has taken over

Yes, I am very frustrated with myself. This is my first virus/trojan/malware infection that isn't a simple fix since having a computer (99) I bought my first computer from a local computer guru ( wrote articles for local paper and online) not a big box and following his advice have been using free anti virus/anti spy/malware for years and while my friends using Norton and McAfee would get viruses or have terrible malware problems, I never did.

What is really frustrating is I knew the very first pop up warning was fake. I wasn't scared, I just knew to run MBAM and all would be well.........

I googled using my netbook and Malwarebytes own forum said to run a full scan and check all the boxes when quarantining and I read to do a quick scan and not check the boxes that said system restore and not to clean temp files more than twelve hours after I had already done it. :(

Just like in the thread above, my programs are all still on my computer, it is just the shortcuts to them normally found under Start All Programs that don't work. I can't find anything missing. My photos/documents all returned when I ran UnHide Monday night.

I know how to fix the quickstart menu and the pin to the start menu but don't know if the infection is fully gone or how to fix the all programs menu....

AMEN!! the forums we recommend to anyone with these serious infections are amazing, they are incredibly knowledgeable teams that work together to guide you through every step of the way. Their knowledge and the special programs that are used are a life saver in so many cases!
That is why when we see evidence of a serious infection we immediately try to encourage going to get assistance from the pros from the very beginning.

Just hang in there buyorsell888 you are in good hands now!

That's all well and good, but many ppl the PC will not even boot or if it does will not let them do anything!! that's why I often help ppl over the phone, or by doing remotes..many ppl do not even know how to boot in safe mode..best thing is to help ppl to download the right software tools, and tell them how to use them and to encourage them to run the scans often... this is what I do with the many seniors I help, and one I talked threw safe mode boot up, and luckily she had malewarebytes, which is recomended to remove the security tool virus which she had.. it stopped her from doing anything with her PC. let alone going to a forum or seeking help..

@susieq07,

Someone needs to put you in your place. And I'm going to do it!

What you are doing is down right wrong. You have not been professionally trained in the removal of malware. If you would have jumped in earlier and told her to boot to Safe Mode and run MBAM this is what would have happened. All programs would have been gone and the malware would have won! Some malware does not even run in Safe Mode. Most of the threats now days installs a rootkit.

Tell me..how do you remove a rootkit?

If your are as good as you think you are then you would know the answer!

If you were a professional then you would know that ASC is bad because it includes a Registry cleaner. A professional would never use that program.

Oh an susieq07, Security Tool IS NOT A VIRUS!!! IT IS A ROGUE PROGRAM. Weren't you told that before? There is a really big difference between a Virus and a Rogue program! If you don't know the difference you are doing an injustice to the Seniors you think you are helping!!!

See below for definitions of several different types of malware.

http://in.answers.yahoo.com/question/index?qid=20110404055408AAZVTKy

I'm sorry everybody, but I can not stand around and allow someone who thinks they know what malware is all about take advantage of the uneducated, especially when it involves the elderly. They are the most trusting people in the world. Someone has to protect/educate them to be aware of those who think they know what they say they do.

Please accept my apologies.

Here is a link that might be useful: Remove Security Tool

Hear! Hear! Thanks, Donna.

To bbblutz...you can KMA..okay, I know what I am doing and I was trying to tell the would be guru's that are directing ppl here to a help forum is of no use if they do not know how to boot their PC's in safe mode or have the proper software installed to do a removal... what part of that don't you understand?? Duh?? alot of the info. here and links provided are of no use to someone who can not even boot the PC due vto a nasty virus.... the advise should be on prevention before a cure is needed...that is what I do with the seniors that help all over the world, I teach them how to keep their PC's healthy as my 4 PC's are always!! maybe you need to be told off, Mr. or Ms. know it all...NOT! if it walks like a duck...etc.

Here is a link that might be useful: Security Tool Virus

Speaking of someone who talks like a know it all.....

Donna Thanks!

A few of you think you run this computer forum..well guess what? YOU DO NOT!!!!!!

I think the thread has exhausted any meaningful content and we should get a moderator to close it. We are all a team and we all have different approaches. Lets focus our efforts on helping the users that come here.

I wanted to say pretty much what Zep has said. There are multiple ways of dealing with these infections. No need to resort to poo slinging!