Virus? Dis Computer Experts... I need you!

[AKL_Megs]

I think I just had a virus... but I am hoping I took care of it.

Looking for some Computer Dis'ers guidance!

What it was was "Antivirus Soft"... my McAfee didn't block it, or it did, but I accidentally allowed it to install itself. Ooops.

It basically rendered my PC useless... everything I tried to do told me that the "application failed to open" because it was "infected", and of course, the Antivirus Soft "program" kept popping up, doing it's own "scan".

So, I went into safe mode.

While McAfee couldn't find it, even in a virus scan, it DID allow me to see what files I accidentally installed.

It was something that it installed in a hidden spot in my TEMP folder... whatever that is. I believe the file was "MOCG.exe" or "MCOG.exe"... something like that. I deleted it, and then deleted something else.

I created a new user (because I am afraid to go back into my own! ) and so far so good. FINGERS CROSSED.

If I am posting this, is it safe to say that it is gone?

 

[dawson5]

Have you tried googling what you installed? I googled the first one, MOCG and that comes up as a microsoft xml converter I think. Pretty sure that is safe.

I cannot find antivirus soft at all. Not sure what that is.

People on here have luck with malwarebytes. I would get adaware and spybot search & destroy, run them.

I think microsoft has something out now also. malicious software remover or something. See if they do the trick.

 

[Imzadi]

Have you tried googling what you installed? I googled the first one, MOCG and that comes up as a microsoft xml converter I think. Pretty sure that is safe.

A virus can name itself anything. Usually they pick names similar to a "safe name." The fact that the ending is an .exe instead of a .dll could mean it's a virus.

I would also Google it and "Antivirus Soft" first and see what other suggestions are out. Download the malwarebytes.com program and run it in Safe Mode a couple of times.

 

[tileman]

It dose help some time's when you are trying to get rid of a virus to unplug the Internet. And run your Antivirus then.

Ron.

 

[dawson5]

OP I did look on bleeping computer. Malwarebytes will remove it but you need to take some preliminary steps, provided it is the same thing:

http://www.bleepingcomputer.com/virus-removal/remove-antivirus-soft

It seems it is an updated version of a previous ransomware and was just updated 30 Jan 10.

tileman I always do that. I don't know why it just seems like a good idea.

 

[Imzadi]

It dose help some time's when you are trying to get rid of a virus to unplug the Internet. And run your Antivirus then.

Ron.

tileman I always do that. I don't know why it just seems like a good idea.

Yes, the virus I had held my Internet Network Connections hostage as it would permanently reroute to whatever website or connection made it reload. Every time I would try to run Malwarebytes, it would kill the program and reconnect itself to the Internet and download a new pop-up virus window.


I had to do a System Restore to a few days before the virus exploded. I knew it was still stored in the computer, but in a dormant state. Disconnect from the Internet and run the Malwarebytes program in Safe Mode (without Networking) twice. Only then did it kill the virus completely.

 

[minechuchie]

Ask about your virus on this website, I had the same problem with a virus called "security tool" it rendered my computer virtually unusable. I found this website using another computer and they had step by step instructions on how to remove it. This site is a god send! Good luck.