Virus - antivirus system pro

[Peggy]

While running active antivirus programs and have windows updates current,
this virus has infected by system BADLY. Cannot even enter through
safe-mode, or format/reinstall windows again.

HELP!

 

[Pegasus [MVP]]

While running active antivirus programs and have windows updates current,
this virus has infected by system BADLY. Cannot even enter through
safe-mode, or format/reinstall windows again.

HELP!

How exactly are you trying to format/reinstall windows?

 

[Peter Foldes]

Peggy

Post this over to the public.security.virus newsgroup for a more comprehensive
answer.
Also make sure you include your OR and any Service Packs and the exact wording of
the error message as per verbatim and al pertinent info also.

Repost it here Peggy

On the web:
http://www.microsoft.com/communitie...ault.aspx?dg=microsoft.public.sefcurity.virus

 

[John McGaw]

While running active antivirus programs and have windows updates current,
this virus has infected by system BADLY. Cannot even enter through
safe-mode, or format/reinstall windows again.

HELP!

How did you identify the problem as a virus? I ask because over the years I
have had users with defective hard drives, bad memory, bad power supplies,
erased system files, wrong file versions, and a host of other problems. The
common thread was that every one of them was absolutely convinced that it
was a virus causing the problems. The fact that you say you "cannot
format/install windows again" seems like very unviruslike behavior since,
even if there was some horrible infection in the system, you should still
be able to boot the system from the CD and do whatever you need to do.

 

[Elmo]

While running active antivirus programs and have windows updates current,
this virus has infected by system BADLY. Cannot even enter through
safe-mode, or format/reinstall windows again.

HELP!

Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

Download the executable rather than the .iso image, if one is
available.. it prompts you to insert a CD and burns the file, no problem.

 

[PA Bear [MS MVP]]

Better yet:
http://www.microsoft.com/communitie...fault.aspx?dg=microsoft.public.security.virus
....

 

[PA Bear [MS MVP]]

There is a very good chance that you are seeing the effects of a hijackware
infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via...

Consumer Security Support home page
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here.

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[David H. Lipman]

From: "Peggy" <[email protected]>

| While running active antivirus programs and have windows updates current,
| this virus has infected by system BADLY. Cannot even enter through
| safe-mode, or format/reinstall windows again.

| HELP!

This is NOT a virus. All viruses are malware but not all malware are viruses.
It is a fake anti malware utility that is in itself malware that is designed to con you
out of money.

Open a Command Prompt and type (or copy and paste)...

sc config AntiSpyFilter start= disabled

Then reboot the PC.

After the PC is rebooted type in a command prompt...

sc delete AntiSpyFilter

Then download, install, update and scan using Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

 

[Peter Foldes]

Thanks. Result of trying to type too quick. Have no idea how I did not see that f in
there

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

 

[PA Bear [MS MVP]]

OT @Peter: Check your PM inbox =>
http://aumha.net/ucp.php?i=pm&folder=inbox