HELP! Virus...

swebb

aliEnRIK wrote: »

Everything your dowloading must be getting infected (or its a false message)

Your going to need to use another (none infected) computer

Download the FREE version of DR WEB
http://www.freedrweb.com/download+cureit/gr/
Burn it to a cheap cd or put ona uSB stick tha has a PROTECTION switch on it (so that when its inserted, your computer cant infect it) and run the program
Turn your anti virus OFF
Click CANCEL to the 'Would you like to read purchase terms now?' message
Click START click OK
It will auto QUICK scan
After that set to scan the WHOLE computer and press the 'play' icon
***DO NOT UPGRADE TO FULL VERSION***

If you cant run it in either mode then your going to have to create an actual bootable disc (we can get to that later if this fails)

If you cant get onto another computer just now then press CTRL ALT and DEL to bring up TASK MANAGER and try to determine what the nasty is and END THE PROCESS to try to continue with malwarebytes etc

OK - I'll try that one. I have been trying with some av's e.g. antispyware, spybot. But the same message with the exe.

I've also tried taskmanager... same blinkin' message "can not start... infected...".

swebb

I'm struggling here - I have a usb stick, but not one that has protection. just a standard connect and disconnect.

I tried that anyway with the same result.

bootable disc? I can't use the DOS prompt...

aliEnRIK

Burn the Dr Web LIVE CD to disc and auto boot at start up
http://www.freedrweb.com/livecd/?lng=en

It will autorun BEFORE loading windows so you can scan the hardrive

swebb

aliEnRIK wrote: »

Burn the Dr Web LIVE CD to disc and auto boot at start up
http://www.freedrweb.com/livecd/?lng=en

It will autorun BEFORE loading windows so you can scan the hardrive

Which of below do I need to burn onto the CD - the .iso?

../HTML/ 18-Jan-2011 11:45 -drweb-livecd-600-en.pdf 18-Jan-2011 11:42 887019drweb-livecd-600-ru.pdf 18-Jan-2011 11:42 1393835drweb-livecd-600.iso 18-Jan-2011 11:41 161847296md5sum 18-Jan-2011 11:53 67

aliEnRIK

yes

Easiest way I know of is to use IMGBURN (free download) and burn the IMAGE (the iso file) direct to disc

swebb

on line scan that I'm running has just found:

c:\users\administrator\appdata\roaming\defender.exe
infected with trojan.generic.kdv.114530

but all I can do is ignore... can't disinfect.

might be a clue? can I do anything further at this point now? or go with the plan you mention re dr web?

aliEnRIK

If the online scan wont let you actually do anything then its next to useless

My recommendation is Dr Web

fiddiwebb

Follow RIKs instructions first but if you get stuck try running Hitman Pro (it's free for 30 days so don't pay anything!) and see what that does, download Hitman Pro from here......

http://www.surfright.nl/en/hitmanpro

Which version you download depends if you are using 32bit or 64bit Windows.

Once you have downloaded Hitman Pro to your desktop hold down the Ctrl key whilst double clicking on the Hitman Pro .exe file to start it.

swebb

aliEnRIK wrote: »

yes

Easiest way I know of is to use IMGBURN (free download) and burn the IMAGE (the iso file) direct to disc

I can't work out how to do this - any pointers?!

aliEnRIK

swebb wrote: »

I can't work out how to do this - any pointers?!

IMGBURN is here -
http://www.fdccdn.net/33772/imgburn/SetupImgBurn_2.5.5.0.exe

Install it

Select to WRITE IMAGE FILE TO DISC
Press the button to search for the file
find the .iso file and double click it
Insert cd
Press the 'large yellow folder' to disc icon
Burn to disc