another computer virus - HELP

[luvmyfam444]

Last time I did a system restore & that worked - just tried it again - it failed with the 1st date I used - went to try another date & now I can't get into the restore screen @ all cause the stupid popups keep me from opening anything now.

My screen is constantly popping up with something that says "antivirus shystem pro alert - infiltration alert....do you want to block this attack, or spyware alert - infected...., while trying to get online it pops up & says application cannonot be executed. The file_______________.exe is infected. Do you want to activate your antivirus softeare now? and IE warning - (with a FAKE microsoft logo) about virus ..

oh WAIT no it's pulling up a porn site - NICE!

Ok - is there anyway I can fix this or do I need to take it to someone?

[OhMari]

I tried system restore, and my computer wouldn't let me, it told me I had a virus to get rid of, and wouldn't let me do anything on my laptop.

I had to take mine in, unless you can get your virus scan to work.
Mine even blocked the downloading of new updates. It took over 2 dayss for my dh tech people to clean my laptop up. They said a "Trojan" got set in mine and every day, it let out a new virus, and until my computer locked itself up and I got the message to do absolutely nothing till the virus was cleaned off the computer. I never had any porn, thank goodness.

I now run updates twice if not three times a day on my home laptop computer.

ie, the tech guys asked my dh if I liked Disney.

[dawson5]

Can you find it in the task manager and shut it down and try and run your AV software?

[glitterkittyy]

Oh that's a good one. You cannot open any program to get rid of it because it won't let you. You also cannot start task manager so.... here's how I got rid of it on my brother's PC:
Re-start the machine
Immediately upon windows launching, do alt-ctrl-del to activate the task manager.
Once this worm launches, you will see it show up in the task manager.
As soon as you see it, end task. I can't remember the name, but it has 2008 or sometimes 2009 in the title. You'll see it!
DO NOT SHUT THE TASK MANAGER.-Once you do, the worm can keep it from reopening.
Then you can run your spyware, adaware type programs and find it.
There are a few out there that will do the trick if you don't have one. Malwarebytes is one.

Once you run your programs and get rid of it, it is safe to reboot and use as normal. It took me about 30-45 minutes to rid my bro's PC of this one.

And this is why I only have Macs lol.

[HappyDznyCamper]

If you can get on the internet, try malwarebytes, it is great at removing problem software.
http://download.cnet.com/Malwarebyte...-10804572.html

[glitterkittyy]

Originally Posted by HappyDznyCamper

If you can get on the internet, try malwarebytes, it is great at removing problem software.
http://download.cnet.com/Malwarebyte...-10804572.html

Just a fyi, this particular worm will let you download malwarebytes, but it won't let you run it! You have to reboot and disable the fake virus protection that the worm launches and then run malwarebytes.

Just trying to save you some headaches, OP. Been there, done that.

[FireDancer]

Do you have all of your data backed up? If so just do a clean install of the operating system. Viruses can get their hooks very deeply into the OS and even removing it isn't necessarily removing it. This is especially true if it was a blended attack, meaning you got a virus along with other malware. You might get rid of the virus aspect and not the other aspect that can be more dangerous.

If you don't have your data you can boot to a LiveCD version of Linux and move your needed data to an external drive. If you have another computer around you can pull the hard drive out of your computer and install it in the other as a slave to drop the info off of it before reinstalling the OS.

If you are not comfortable doing this (or know someone who is) I would do the following:

Run the Microsoft Malicious Software Removal Tool. To do a full scan click start, select run, type MRT into the box, and select full scan from the menu that comes up (middle option). The date on the MRT should be November 2009. If it isn't your machine isn't patched. Patch it if the virus isn't blocking the Microsoft Update site. This tool can get pretty deep into the OS and look at the Kernel and dlls to see if they are altered or not.

In the end even after I recover a computer from a virus I almost always do a reinstall of the OS. It is the only way you will know that any infection is all the way gone.

[luvmyfam444]

Keeping my fingers crossed that these options work~

[3boymthr]

DM had this happen the only way they could salvage the computer was to reinstall the OS.

I had it happen at work one time - I was doing some research for a client and clicked on a link in Google and noticed that in the background an install was running then all this lovely porn kept popping up. Luckily, I knew to call tech support the second I saw the download happening. 7 hours later they were able to finally clean it all off and stop the porn. Horrible.

That reminds me time to run my anti-virus and malware scans on full mode...

[luvmyfam444]

well - its been 20 mins of the MRT scan - been thru 70000 files & nothing infected showing. Probably had 60 secruity warning/spyware alerts pop up during this time though! Hoping for the best!

[luvmyfam444]

ok - scan finished - nothing found - onto next tip y'all gave....

[luvmyfam444]

Originally Posted by HappyDznyCamper

If you can get on the internet, try malwarebytes, it is great at removing problem software.
http://download.cnet.com/Malwarebyte...-10804572.html

nope no getting on the internet - only what it sends me to see! UGH!

[luvmyfam444]

Originally Posted by glitterkittyy

Oh that's a good one. You cannot open any program to get rid of it because it won't let you. You also cannot start task manager so.... here's how I got rid of it on my brother's PC:
Re-start the machine
Immediately upon windows launching, do alt-ctrl-del to activate the task manager.
Once this worm launches, you will see it show up in the task manager.
As soon as you see it, end task. I can't remember the name, but it has 2008 or sometimes 2009 in the title. You'll see it!
DO NOT SHUT THE TASK MANAGER.-Once you do, the worm can keep it from reopening.
Then you can run your spyware, adaware type programs and find it.
There are a few out there that will do the trick if you don't have one. Malwarebytes is one.

Once you run your programs and get rid of it, it is safe to reboot and use as normal. It took me about 30-45 minutes to rid my bro's PC of this one.

And this is why I only have Macs lol.

I didn't see anything in the task manager that said WORM (LOL) one thing had 08 behind it not 2008 just 08 & that was it - others had #s there

Nothing should up in applications - I was under that next tab (can you tell I'm CLUELESS!)

I didn't see the virus launch - there were 55 things listed & several of the #s jumped -so I couldn't tell when something new came on & since it didn't call itself WORM or TROJAN or VIRUS I was at a loss


I'm guessing I just need to let it go & assume I've lost everything on there - and no its not all backed up! UGH! My dad is a computer guy so I can give it to him to work on for free - though it may take him forever to get around to it - but I'll get it to him - something for him to do for Thanksgiving.