hi,
i have few problems, can anyone please help me,
somehow i got this virus:
anti virus pro 2010
i tried everything and i just can get rid of it,
and i cant get out of safe mode............::confused:
thanx
Printable View
hi,
i have few problems, can anyone please help me,
somehow i got this virus:
anti virus pro 2010
i tried everything and i just can get rid of it,
and i cant get out of safe mode............::confused:
thanx
Welcome to Virtualdr. Follow these instructions... use safe mode with networking to download the programs and start with Superantispyware in safemode as per instruction. Then try normal mode but use safe mode if absolutely necessary for the rest.
Print these instructions out.
NOTE. If any of the programs listed below refuse to run, try renaming executive file to something else; for instance, rename hijackthis.exe to scanner4.exe
1. Download SUPERAntiSpyware Free for Home Users:
http://www.superantispyware.com/
* Double-click SUPERAntiSpyware.exe and use the default settings for installation.
* An icon will be created on your desktop. Double-click that icon to launch the program.
* If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
* Close SUPERAntiSpyware.
PHYSICALLY DISCONNECT FROM THE INTERNET
Restart computer in Safe Mode.
To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; select Safe Mode; you'll see "Safe Mode" in all four corners of your screen
* Open SUPERAntiSpyware.
* Under Configuration and Preferences, click the Preferences button.
* Under [b]General and Startup" tab, make sure, Start SUPERAntiSpyware when Windows starts option is UN-checked.
* Click the Scanning Control tab.
* Under Scanner Options make sure the following are checked (leave all others unchecked):
- Close browsers before scanning.
- Scan for tracking cookies.
- Terminate memory threats before quarantining.
* Click the Close button to leave the control center screen.
* Back on the main screen, under Scan for Harmful Software click Scan your computer.
* On the left, make sure you check C:\Fixed Drive.
* On the right, under Complete Scan, choose Perform Complete Scan.
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.
* Make sure everything has a checkmark next to it and click Next.
* A notification will appear that Quarantine and Removal is Complete. Click OK and then click the Finish button to return to the main menu.
* If asked if you want to reboot, click Yes.
* To retrieve the removal information after reboot, launch SUPERAntispyware again.
- Click Preferences, then click the Statistics/Logs tab.
- Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
- If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
- Please copy and paste the Scan Log results in your next reply.
* Click Close to exit the program.
Post SUPERAntiSpyware log.
NOTE: Tracking cookies can be omitted from the log.
RECONNECT TO THE INTERNET
RESTART COMPUTER!
2. Download Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php to your desktop.
(Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
RESTART COMPUTER!
3. Download gmer.zip: http://www.gmer.net/files.php
Unzip the file, and double click on gmer.exe, select Rootkit tab and click the Scan button.
When scan is completed, click Save button, and save the results as gmer.log
Warning ! Please, do not select the "Show all" checkbox during the scan.
Post the log to your next reply.
RESTART COMPUTER
4. Download, install, and run HijackThis:
http://www.snapfiles.com/get/hijackthis.html
Post HijackThis log.
Do NOT attempt to "fix" anything yet with Hijackthis!
DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
Above layout courtesy of Broni
thanx, i will try that, but i still dont know how to exit safe mode,
anyway will let u know....
thanx again:)
no it doesn´t let me run the program at all.........:mad:i really dont know what to do and i just cant get out of safe mode.....
Download the programs to your computer.
Malwarebytes is the only one that will install in Safe mode and it can update if you Are in Safe Mode with networking.
To get out of Safe mode, use the same steps as you do in Windows.
thanx train,
i cant find anythin because virus dont let me find it...ex. when i write in google malwarebytes, t shout it down, can u please post a link 4 download?
ty,
C.
http://www.malwarebytes.org/mbam.php
It was in the instructions above.
thanx fink, i know, but it didnt worked.....
nope it doesnt work, when i click on link, it opens and immediatly close, dont know what 2 do, is irritatin....
Or use another computer to download. Then burn to a cd or place on a thumbdrive and transfer them that way.
thanx,
fink: i cant , it just keep on closing....
train: i will try that,
thanx guys,
will let u know how it goes....
train i tryied it, it doesnt work...........
what to do now?????
I'll look into whether a scanner called "Combofix" will work in safe mode.
??
This might work.
Avira AntiVir Rescue System
http://www.free-av.com/en/tools/12/a...ue_system.html
You can use another computer to make it.
Combofix is a scanner we use when others can't install or run. I"m not sure yet whether it can be installed in safe mode. I've asked one of our resident scanner experts, Broni, by private message and will likely hear back soon.Quote:
??
thank u for explaantion, i never heard about it...Quote:
Originally Posted by fink
did it work?
thanx for explanation, never heard about it, does it works?Quote:
Originally Posted by fink
thanx train will try
nope, doesnt workQuote:
Originally Posted by Train
name of virus is: anti virus pro 2010
Ok, try combofix... download it however you are able then install and run it in safe mode..
Please download ComboFix from Here or Here to your Desktop.
**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
- Please, never rename Combofix unless instructed.
- Close any open browsers.
- Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
- Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
- Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
NOTE. If Combofix asks you to install Recovery Console, please allow it.
- Close any open browsers.
- WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
- Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
- If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
- Double click on combofix.exe & follow the prompts.
- When finished, it will produce a report for you.
- Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.
**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**
Make sure, you re-enable your security programs, when you're done with Combofix.
DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
Above combofix instructions courtesy of Broni
YEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE!!!!!!!
FINK IT WORKED......COMBOFIX FIXED IT!!!!!!!!!!!!!!!!!!!
THANK U , THANK U GUYS FOR ALL THE HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
U R THE BEST!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!:)
We aren't necessarily done. You should post the combofix logfile and a hijackthis logfile so we can see if all of the malware is actually gone.
where can i find it?
You'll find it here in the root of the C: drive..
C:\ComboFix.txt
sh"#"#"¤t,
now windows dont wanna start!!!!!!
last thing its:
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS\system 32\Drivers\Mup.sys
im gettin crazy here
If you're using Windows XP I'd try the Windows recovery console. instructions here..
http://www.windowsnetworking.com/art.../wxprcons.html
If you're using Vista others may weigh in on a solution.
i dont have recovery cd......
how can i made it? or can i use usb key?
Can you borrow an XP install cd? It has to be the same version as the current install eg- home, pro, corporate etc. Can you confirm that you are using XP?