Posted on 02/17/2010 4:41:50 PM PST by Frantzie
Somehow I picked up this beauty. I had Avast and old Norton which I need to remove.
I am now trying to remove it with Avast on a reboot scan. I tried to download Malware Bytes on this machine but this awful virus sucks up everything on the machine. Avast is at 10%. I am not sure it will get it.
If Avast on the boot does not get it I will try to install PC Tools but this virus sucks up everything once the machine boots.
I trie dto download Malware Bytes and IE would not launch but Mozilla downloaded it. The AntiVirus Soft block Malware bytes from starting. Unreal.
http://www.pctools.com/threats/view/name/Antivirus%20Soft/?ref=google_antivirussoft&gclid=CPG9otPQ-p8CFZVj2god_2Y0WQ
Its not that Security Tool thing is it?
OK.. I need to pay more attention to the title... lol
These fake AV programs usually have a rootkit that will keep you from running real AV. The one I had to deal with was a variant of the TDSS rootkit. There is a special tool called TDSS_killer available on the Kaspersky AV site. Once the rootkit was disabled, I was able to run Malware Bytes and remove the virus.
You will have better luck using a different computer to download malware bytes and the other tools you will need.
>>Its not that Security Tool thing is it?<<
That hit my wife’s computer and one of her friends.
If I ever meet the author I will happily cold-cock his butt, strip him naked, lock him in stocks and stomp on his genitals with heavy boots for hours in public.
It took everything I know (and a few things I didn’t) to get that damn thing out.
It took me hours and a restore point and lots of trouble to remove it from my neice’s computer.
Download Malwarebytes on a seperate system. Boot the infected system into safe mode (tap F8 as you boot up). Transfer Malwarebytes via usb drive over to the infected system. Install and run in safe mode.
(If the infection is so bad that you cannot run Malwarebytes in safe mode, connect the infected drive via usb cable to a machine with Malwarebytes and run from that machine.)
After Malwarebytes runs, boot up normally and go to www.safer-networking.net and download Spybot S&D.
Run Spybot. Run Malwarebytes. Repeat until clean runs of both are done. Reboot. Repeat. Once you have clean runs of both after a reboot, install your favorite Anti-virus software (I am still sticking with AVG personally at this point)
Security Tool didn’t even let me bring up Task Manager. ggrrrrr
that was going to be my suggestion. It saves a lot of time.
Kudos
Any ideas where you picked it up?
Yeah, I got that a while back. I manually removed it.
I got this today. Malwarebytes removed it, Freep mail me if you need help
Get Microsoft Security Essentials. You’ll never go back to AVG.
Manual removal steps here, http://www.2-spyware.com/remove-antivirus-soft.html
Have you Task Manager to stop it from running, and then manually removing it? Talk back.
your best bet is to let the virus load and then use the task manager to see what is running. Look for names and files for this virus and look for those folders.
Whne you have identified those folders and processes you can then use the process name to search the registry from regedit.
delete the lines that reference the virus.
It sounds simple and for the most part it is. It will take time to locate all of the files, folders and startup commands.
This is how I get rid of viruses.
Also, once it is cleaned, you should make a backup copy of your registry. THe next time you get a virus, you can stop the processes, delete the folders and import you copy of the registry.
It may greatly expedite the download if you were to create, and switch to, another user account. If you are already using an administrative account, it wouldn’t hurt to create and use another as that defensive line has already been crossed (one should always try to surf from limited account profile and just use Admin accounts for global programs installations and file manipulations). In fact, the virus may only reside in a single user profile.
Search FR titles for “antivirus” to find my recent posting on my encounter with “Antivirus Live” ( which this sounds like ) and of course a lot of discussion.
http://www.freerepublic.com/focus/f-chat/2440876/posts
Worked for me today. I had to download Malwarebytes on a separate PC.
Microsoft security essentials let this infect my PC
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.