Multiple Symptoms, Nothing Works

ask_questions

Hi folks,

I bought a laptop used and didn't notice that the virus protection was "turned off." Right away it seems I picked up a trojan from a midi download site. When I ran my antivirus, it popped up "pompous denial 66.198.158.102,80" and it shut down the antivirus. I wasn't able to re-boot the antivirus. So I uninstalled it and tried to re-install. No dice. I tried installing other programs including AVG, Macaffee and Norton online hoping to be able to eliminate this thing, it shuts down the download in mid-stream. I tried purchasing a disc thinking it would download from that, but same problem, it simply shuts it down. My security center thinks the antivirus is "on" but it's not, I can't run a scan or do anything with the antivirus program.

Symptoms include slow-down and interferance with Google search (it re-directs all searches to Yellowpages) and my firewall picks up the above-named IP and blocks access to it so I know there is some sort of spyware or denial program attempting to run.

Help?

Thanks!

rootkit

Hi and welcome to our forums.

In order to be able to further investigate the reported situation we need a bit more information from your computer as follows:

. A BDSYS log;

[how to GENERATE A BDSYS LOG]

. Save and extract the BDSYS tool to a location of your choice:

http://www.bitdefender.com/files/Knowledge.../BDInfoTool.exe

. Make sure you close all active applications and then run "BDInfoTool.exe"; If you receive a firewall

alert,select to Allow the application to connect;

. Click the "Create log" button to start generating the

log; A progress bar is indicating that the tool is creating the report;

. When the small window appears with the message "Log

saved" then the report is complete and a new file named "bdsyslog.zip" has appeared on your Desktop;

. Send me via PM the generated log file.

. If the file is to big to send it over PM, upload the results to one of the online file hosting servers mentioned below or use one of your own and send via PM the download link.

http://www.sendspace.com

http://www.mediafire.com

IMPORTANT:

.During this process the Real Time Protection in Bitdefender must be temporarily disabled;

.If you receive a Bitdefender Firewall alert to inform you that BDInfoTool.exe tries to connect to the internet,then you need to select Allow;

[how to DISABLE THE REAL-TIME PROTECTION on Bitdefender 2010]

In order to disable the real-time protection please open Bitdefender, click the "Settings" button in the upper right side of the interface, Switch UI to "Advanced Mode", Click "OK"; Go to "Antivirus" > "Shield" and click on "Real-time protection is enabled", select the time interval that suites your troubleshooting needs and click "OK" (the message will change to "Real-time protection is disabled"). The real-time protection should be enabled after performing the troubleshooting procedure.

[how to DISABLE THE REAL-TIME PROTECTION on Bitdefender 2011]

In order to disable the real-time protection please open Bitdefender, click the "Options" button in the upper right side of the interface, Switch UI to "Expert View"; Go to "Antivirus" > "Shield" and click on "Real-time protection is enabled", select the time interval that suites your troubleshooting needs and click "OK" (the message will change to "Real-time protection is disabled"). The real-time protection should be enabled after performing the troubleshooting procedure.

[how to DISABLE THE ANTIVIRUS PROTECTION in Bitdefender 2012]

In order to disable the antivirus protection,please open Bitdefender and click the "Settings" button in the upper side part of the interface"; In the new window go to "Antivirus" > "Shield"tab and click on "Turn off" under On-access scanning.Select the time interval that suites your troubleshooting needs and click "OK" . The On-access scanning should be enabled back after finishing the troubleshooting procedure.

[How to create a screen shot]

On Windows, press the Print Screen or Prnt Scrn key on your keyboard, found at the upper right of the keyboard. This key will capture the entire screen. Open up your paint program -click on "Start-> All Programs-> Accessories->

Paint". In the paint program, select File/New, then Edit/Paste. Then save the file and attach it in your PM message.

If the file is to big for send it over PM, upload the results to one of the online file hosting servers mentioned below or use one of your own and send via PM the download link.

We will get back to you as soon as the analysis is complete. Have a nice day.