Help - Search - Members - Calendar
Full Version: virus
UKT Support - Message Board > Technical Support > Software Support
penfold
Hello. i seem to have managed to contract multiple viruses. Not sure waht to do next. Windows XP and I have web pages popping up at random. Help please!!!!
Grasshopper
Assuming that you have anti virus software installed, I would boot into Safe Mode (press F8 as you boot to get the option) and run a scan there. That should stop the nasties runing and give the scan a chance.

But pop ups might not be viruses as such but more likely adware. So I'd also download, update & run the free version of:

MalwareBytes
penfold
thanks. Tried that but my anti virus won't work in safe or normal mode. And I cant reinstall it (McAfee)I've tried downloading software (Anti Var) but the site rejects me (because I'm infected) Have ended up with Safety Centre (very annoying) and Spy ware Doctor but both require a purchaseable licence. Any ideas?
glen
Have you tried a Panda ActiveScan? http://www.pandasecurity.com/homeusers/solutions/activescan/
That should resolve the virus issue although it will tell you that you have a good deal of spyware.
I have used SuperAntispyware successfully in the past for virus removal. http://www.superantispyware.com/download.html
I also use AVG on some of my pc's. http://free.avg.com/download-avg-anti-virus-free-edition
Grasshopper
Saftey Center is a rogue anti virus software. It is what is telling you that you can't download anti var. It will also be what is stopping McAfee from running. The alerts that you are getting will be complete rubbish.

The tool that you need to remove it, is the one I pointed you to earlier.

Full instructions on:

BLEEPING COMPUTER
penfold
Hi Thanks so far but not got anywhere. tried to download the software to remove safety centre. It installs ok but when I run it the expected web page just disapears and nothing happens. Managed to install Anti Var using a pen drive but in normal mode when its run the pc reboots. In safe mode it scans, seems to fix a few things but makes no differnce in normal mode.
Grasshopper
Try running MalwareBytes in Safe Mode.

Failing that, use MsConfig to stop protector.exe running at startup, reboot & then run MalwareBytes.

If that fails, have you got another PC? If so, remove the hard drive from the infected one, connect it to the other PC as a slave or via an eternal USB adapter and scan it from the clean PC.
penfold
Hi. Tried running MalwareBytes in safe mode and get the same result. The program starts the first time then the window just disapears. Won't run again after this without being reinstalled.

I don't seem to have protector.exe in startup so I can't disable it. Left with scanning from another pc. Do I just get hold of a cable with a usb plug on each end and I'll see my pc from my laptop as a drive letter or is their more to it? Any chance of infecting my laptop by the way?

thanks so far
Grasshopper
That's irritating. They are constantly improving the defences of these d@mn things. It's worth hunting through the start up items in case it is under another name. But if it can prevent things running in safe mode that probably won't be enough.

To use another computer to do the scan you will need to physically remove the hard drive and connect it to one of these:

http://www.ebuyer.com/product/136214

Before you do, make sure that your anti virus software is up to date on the computer to do the scan. And install MalwareBytes and update it. And I'd also install AdAware & A Squared Free. You might as well hit it with everything. There is a possibility of cross infection but you can avoid this by not opening any files on the attached drive. Just scan it with one tool after another until they read clean.

The attached drive will appear in My Computer once your PC has gone through the process of installing drivers for it.

The alternative of course, is to find the local equivalent of me to do it for you. There are usually ads in the local papers.

Best of luck.
penfold
gave up and reinstalled operating system. Now trying to get drivers back. Did have a subscription to driver detective but now when I try to run the prgoram it fails to initialse saying a re install will help. It doesnt. Wish I could kick the a**** of whoever lets these viruses loose!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.