Regarding computer is locked

PortgazHyde

New member
Member
Local time
9:10 AM
Messages
40
Hi, im using Win 7 32bit and never connected my pc to net.Yesterday, i connected to my aunt wifi and started IE and the homepage load fine but when i entered google url i got a message that my pc is locked from accessing google and i should complete a survey.So i googled using my aunt laptop about that message and found that its a malware so i followed the instruction on that particular website.I booted in safe mode and found 3 of them 'PUM.RightClick , PUM.Hijack.CMD, PUM.Hijack.Run' and i send them to quarantine.A few minutes ago i mistakenly delete them in normal mode and after restarting i can't right click anything except taskbar.Oh, i forgot to mention that i use Malwarebyte Anti Malware.
 

My Computer

OS
Ultimate x32

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Pandora (computer name)
OS
Windows 7 x64 / Windows Server 2008 / Linux (Redhat & Deb distros) / OS X / More
CPU
AMD FX 8150 Eight-Core Processor 4.23 Ghz OC
Motherboard
ASUS SaberTooth 990FX
Memory
G.SKILL Ripjaws X Series 32GB (4 x 8GB) DDR3 SDRAM 1333
Graphics Card(s)
2X Radeon HD 4870 CrossFire X
Sound Card
Onboard and loving it
Monitor(s) Displays
2x HP w2480 Wide LCD
Screen Resolution
1920x1200 each
Hard Drives
RAID (6x0 Seagate Barracuda 7200 rpm 32 MB cache 500Gb SATA)
PSU
Antec 850 Watt
Case
Antec 900
Cooling
Lots of fans
Keyboard
Logitech
Mouse
Rat 9
Internet Speed
40 Mbps Down 5 Mbps Up
Antivirus
AVG
Browser
Chrome, Firefox, IE
Other Info
My main desktop
Had tried it

Had run sfc /scannow.It said that it had repaired corrupted file but when i try it still the same.Do i need to restore cuz i afraid that i will get the malware again.Edit: Had run the scan again, the cmd said it found no violation but i still cant right click.I think it had a connection with hijack.rightclick malware that i deleted.
 
Last edited:

My Computer

OS
Ultimate x32
PortgazHyde,

Malwarebytes Anti-Malware produces a report that is found under the Logs tab.
It will give us something to work with by showing which files were involved, etc.

Can you use the keyboard to highlite the report where the malware was found by pressing Ctrl and A
Then use Ctrl and C to copy the highlighted text.
To paste the selected text, press Ctrl and V

Please provide the MBAM log in your reply.


Also, please download SystemLook from the following link:
32-bit System:
http://jpshortstuff.247fixes.com/SystemLook.exe
Save the file to the Desktop
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following quote box into the open textfield (Do not copy the word 'Quote':
:reg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|NoViewContextMenu
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions|NoBrowserContextMenu
  • Click the Look button to start the scan.
  • When finished, a Notepad window opens with the results of the scan.
    Please post the SystemLook.txt in your reply.
 
Last edited:

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
Sorry for late reply

Sorry for the late reply,i can't give you the MBAM log cuz i already uninstalled MBAM due to it slowing my laptop and i got no notice on malware before uninstalled.As for the system look software, i got 'no key found' as result.Im using avast and found nothing unusual.
 

My Computer

OS
Ultimate x32
My bad! Brains are not working today...:o...senior moment.

Please run SystemLook once again. This time use the following:

:reg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
Same result

I got the same result.
I guess my pc is clean.
 

My Computer

OS
Ultimate x32
Can you right-click now?

Getting the same result does not necessarily mean you are clean.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
Back
Top