Virus Help! :(

Akisohida

Akisohida

Title Not Found
Joined
Feb 8, 2008
Messages
404
Ok, it seems the place I go to kinda sucks. I am STILL infected.

When I run firefox, random popups happen. Tracing them, they seem to be happening THROUGH Internet Explorer. I STILl can not run Malewarebytes.

Microsoft Security Essentials is scanning as we speak so I will update on that tomorrow.

Anyone have any bright ideas? I am not shelling out another $50 to loose my PC for 4 days when they did not fix it the first time! :(
 
try downloading superANTI Spyware Free Edition it as worked for me in the past when i couldn't do anything with my computer because of how bad it was infected just do a couple scans with that for a try and restart your computer after each one and let me know what happens.
 
I got a few tips:

Try a program called A squared. Its free and better than malwarebytes.
Also try going into program files and finding malwarebytes' folder. Go into it and change the name of the .exe (its like mbam.exe) to explorer.exe. Often a virus will stop a program from running but if its an unknow name it will let it run. Also have you tryed scaning in safe mode? Restart and hit F8 (maybe something else).
 
It seemed that, when the guy fixed my PC, he rolled it back or something, because Virtumundo was a big problem again. Just like the LAST blanking time he fixed it! I ran Spybot, rebooted, ran spybot on startup, then ran Microsoft Security Essentials (that scan alone took 2 and a half hours!). So far, I have gotten no random popups so I may have killed it.
 
Create a second partition, install Ubuntu linux onto it. Then find the infected file on linux, and clear it out.


Linux wont be affected by the virus, since it runs on a different filesystem and doesnt use dll's and such
 
Grab combofix, for the most part it cleans out anything. I've had it fix an assortment of viruses over the past couple years.
 
Combofix is a great solution to just about any malware problem. If you're having problems with not being able to run an antimalware program, download it on another computer, rename the install files to something like word.exe and then install it on your infected computer. Some of the malware out there is blocking known anti-malware install files so that you can't get rid of it as easily.
 
You pay'd someone to fix a virus? Dude.. just reformat. Chances are the virus is so spread around your registry that your not going to get rid of it. Need a clean install to make sure all the traces are gone.
 
Last edited:
My lil cousin computer got infected about two weeks ago from the idiots at personal security who use scare ware to make you buy there crap software to clean your computer of infections it took me some 3+ hours of reading this with a friend to finally get the junk off not sure if this is the problem your having with the fake pop ups or not
http://www.spyware-review.net/remove-personal-security/
 
99% of the time virus's and malware can be removed. There is no need to reformat when you could spend an hour and fix the problem with zero data loss.
 
I've had the most luck using an app called Autoruns which you can download through Technet:
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

In the zip file Autorunsc is a command line version which you won't need. The application will show you everything which auto loads on your computer. If the popups are mostly limited to IE, there will likely be some bad stuff on the Internet Explorer tab in Autoruns.

Most of the malware I've manually removed will have multiple registry keys reinstalling the bad software into IE. In Autoruns, you're looking at anything which shows up as "Not Verified" as the "Verified" items have been digitally signed by Microsoft. Just because it's "Not Verified" doesn't mean it's bad, but those are the items to question as they don't have digital signatures with Microsoft. I don't think I have ever come across "Verified" malware before.

Unchecking the box will keep the item from starting up automatically, and deleting it will remove it from the registry completely. If it comes back, something is re-enabling or reinstalling it. Use caution when removing stuff from the registry, whether with Autoruns, Regedit or any other program.

If you can identify the malware by using Autoruns but can't delete it because it's still running, you can use the task manager to try to find it (unlikely to work) or you can use another Technet tool Process Explorer which is like the Windows Task Manager on steroids.
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

I like it because I can trace particular known bad dll files back to the parent process and manually kill a process and/or process tree.

In Autoruns and Process Explorer you can right click on an item and select "Search Online" to find out what the general consensus is regarding the file in question.

Here's a forum for Autoruns on the Sysinternals/Microsoft site:
http://forum.sysinternals.com/forum_topics.asp?FID=16

They have stickies for useful stuff including what not to uncheck from Autoruns as you can potentially hose your system if you aren't careful, just like editing the registry in any other way.
http://forum.sysinternals.com/forum_posts.asp?TID=5226

You don't need to rebuild your system, but for a lot of folks it's much easier and less painful.

I wouldn't recommend installing Linux or UNIX onto another system partition if it's not something you will use on a regular basis. Most of the bootable distros will give you read/write access to NTFS partitions. If you're interested in Linux, UNIX, BSD, etc. start here:
http://distrowatch.com/
 
Last edited:
yh well, i had this annoying virus thats keeps restarting my pc and crashing cod -,-. It is probably in my rom. (read only memory) so formatiting wont help, altough i recommend a good security programm, i use mcfee, but if you have a slow pc, i would not recommand it, cauz i kinda takes alot memory to run, Best way to get of a virus= turn your internet of (so the virus can't communicate with the internet anymore) then you should try to scann it with several scanning programs. (don't use to much programs) if that still wont work, create a new partition, and put linux on it (most virusses are written for windows). then try to scann it with linux. otherwise, get an other hard drive.
 
You must log in or register to reply here.

Latest posts

Back
Top