Computer help please..possible virus?

[CharityLynn]

OK a couple of days ago Vista Security or something popped up saying we had threats, this is the first time we even saw this program in the 2 years we've had this computer. We normally use the Free AVG program for our security. AVG is saying the computer is clear and it says we are protected. But obviously there is something wrong.

Well My husband turned the Vista thing off through Task Manager and it hasn't popped back up. But our computer is not working right at all. You can not use the shortcuts on the desktop at all. You click it and something pops up asking what program you want to use to open it. Same thing for items on the start menu.

We have no idea what to do but I'd love my computer to start acting right again.

I was messing around with AVG (Currently running another scan) and I found this in the virus vault.

"Infection";"Trojan horse SHeur3.EBY";"C:\Users\Charity\AppData\Local\av.exe";"";"3/15/2010, 2:42:08 PM"

Any advice is appreciated,

Charity

 

[HappyDznyCamper]

Try malwarebytes, you can download it through cnet.com

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
This does a good job of cleaning out things like what you describe. You may need to run it several times to get everything. Also try windowsdefender from microsoft.

 

[browneyes106]

I agree with the previous use malware bytes. Also if you get rid of the viruses and trojan horses consider getting the full version of AVG Internet Security. It costs around $60-$70 but it is worth it.

 

[dawson5]

I wonder if it messed with your registry. Re-cleaning won't make those work if it did that.

 

[metalis4ever]

That is definitely a Trojan, we had that on our computer a couple of weeks ago. It took a while but Norton finally updated, found it and cleared it out. But as the previous PP's suggested Malwarebyte is good to use...but first let your anti-virus catch it and clear it out, if you have AVG let it update and run again and it should do the trick....A good indicator of a trojan or other virus would be if the hotkey screen pops up as many Trojans and viruses corrupt the hotkey and run through that program....

 

[clutter]

OK a couple of days ago Vista Security or something popped up saying we had threats, this is the first time we even saw this program in the 2 years we've had this computer. We normally use the Free AVG program for our security. AVG is saying the computer is clear and it says we are protected. But obviously there is something wrong.

Well My husband turned the Vista thing off through Task Manager and it hasn't popped back up. But our computer is not working right at all. You can not use the shortcuts on the desktop at all. You click it and something pops up asking what program you want to use to open it. Same thing for items on the start menu.

We have no idea what to do but I'd love my computer to start acting right again.

I was messing around with AVG (Currently running another scan) and I found this in the virus vault.

"Infection";"Trojan horse SHeur3.EBY";"C:\Users\Charity\AppData\Local\av.exe";"";"3/15/2010, 2:42:08 PM"

Any advice is appreciated,

Charity

I got that about a year ago, and got it again last weekend! Last year, I found a site where you do what your dh did, then you find the program in your C drive (looks like you already did). It won't let you delete it, but there was something you can do to enable the deletion. (I'm thinking you rename it, but I can't remember.) I searched the internet for a little bit looking for it today, but couldn't find it. Maybe you change the file type from .exe to something else? Let me know if you try it and it works!

 

[Imzadi]

"Infection";"Trojan horse SHeur3.EBY";"C:\Users\Charity\AppData\Local\av.exe";"";"3/15/2010, 2:42:08 PM"

I agree with the Malewarebytes recommendation. A few people here recommended it to me a couple months ago when a similar virus infected my computer.

It probably actually wasn't any "Vista Security" program. The virus uses the same logos as Vista or Microsoft, so you think it's from the real company. Follow the BOLDED directions below. It will save you HOURS of grief.

I fought for several hours with the Trojan, it wouldn't let me install the Malewarebytes and another tool to activate them. Or, it would shut the computer completely down, knowing a reboot would activate it again. I Googled two remedies, including renaming the Malewarebytes.exe file and still no go.

Finally, I did a System Restore in Safe Mode back to several days ago. I knew it was still in the computer, but at least it was dormant back then. Only then, was I able to install and run the Malewarebytes program.

It found and removed THREE Trojans in the registry (including the one my AVG antivirus kept finding & removing,) and 173 other infections of a stealth VideoEgg adware installation that must have bundled itself with some other download I did.

My computer is working beautifully again!


I have done about 4 Malwarebytes scans in the 2 months since then as well as many AVG scans. I was even on a website which was hacked and inserted a nasty virus to anyone's PC who visited it. Many people's computers went down that day. But, MINE, with the Malwarebytes, AVG and a 3rd pdf program which automatically scans for viruses, STOPPED the virus from infecting my computer!

 

[FireDancer]

The free Windows Malicious Software Removal Tool is a very good, and free, removal tool. Click start -> Run -> type 'MRT' and run a full scan. It will take a while but is pretty good at getting rid of anything that shouldn't be there.

You can also boot into safe mode and manually remove the file you mentioned above.

 

[Imzadi]

I wonder if it messed with your registry. Re-cleaning won't make those work if it did that.

Malwarebytes actually goes in and cleans out the registry.

 

[erincon23]

I had a problem just yesterday! Something that called itself "Antivirus Soft" popped up and said my computer had been infected. I realized quickly that this wasn't a "good" piece of software. I couldn't get into anything -- couldn't launch internet, go into Control Panel, anything! I turned the computer off and called the repair guy I've used before. He said he knows this virus, and came out later in the day. It can either be fairly easy to remove -- mine took an hour, but he got it all -- or it can wipe out your hard drive. I too have AVF Free, but couldn't update it to AVG 9 for some reason -- he did it for me and installed Malwarebytes. If you're unsure or if you can't follow the steps above because of the virus, call someone quick! It was worth the money to me to have him come out and take care of it.

Erin

 

[CharityLynn]

I am currently using FireDnacer's advice and this has been running for just over 1 hour and still no infected files. But it does say it can take hours so I'm still waiting. lol I'm really hoping this work if not, next step is the Malwarebytes.

 

[Piecey]

Malwarebytes worked for me, too.

I got it on my laptop, which runs on XP... so my virus said "XP Guardian" or something. Malwarebytes got rid of it!

 

[mrodgers]

Something no one has mentioned yet...

Reboot into safemode and scan with malwarebytes again. These programs will see that they are removed and reinstall themselves. Many times they will disable programs such as malwarebytes and anti-virus applications. Rebooting in safemode ensures that the virus is not running in the background to reinstall itself and malwarebytes will clean all traces out.

Malwarebytes has never failed to clean anything up for me.

Another hint, celebrity sites are riddled with this stuff. My wife is addicted to celebrity sites and gets these fake anti-virus stuff popping up all the time. I try to get her to quit looking at these sites, but that's like handing my kids a piece of candy and telling them not to eat it.

 

[FireDancer]

I am currently using FireDnacer's advice and this has been running for just over 1 hour and still no infected files. But it does say it can take hours so I'm still waiting. lol I'm really hoping this work if not, next step is the Malwarebytes.

It does take a while. It is the first thing I try and if it doesn't find anything go with some of the free software mentioned here. The PP who mentioned Safe Mode is right, do a scan in both standard mode and safe mode. Standard will get any running processes that should be going and safe mode will take care of cleaning the files that launch those processes.

 

[luv2sew]

We had it last week actually twice....malwarebytes worked for us.

 

[CharityLynn]

Well the Microsoft thing didn't pick up anything. But that doesn't mean there is nothing there obviously or I wouldn't be having all these troubles. I guess I'll be talking to my husband and getting malwarebytes.

 

[Imzadi]

Malwarebytes is a free download. Boot up in Safe Mode WITH NETWORKING, as I said earlier. Do a System Restore to several days ago, you can always undo it. Then download & install the malwarebytes program & run it. You may have to run it a couple times to be sure it catches everything.

Good Luck! Many of us have been through this, too. We're rooting for you.

 

[CharityLynn]

Oh boy that is so confusing I don't know where to start. I need a computer for dummies handbook right now lol. What is Safe Mode and how do I access that. Also doing a system restore how and should I go back to the 15th (the date on the virus thing?)

 

[CharityLynn]

Also the link given on the first page has the malwarebytes program costing $25 is this right?

---Nevermind found it for free

 

[CharityLynn]

Ok I am trying to download this and it gets to wear you need to click run..but I get a box that pops that says OPen with..and then it want me to pick a program. My computer is so screwed.