System Tools Virus Infection Removal

becky170

aliEnRIK wrote: »

After that id recommend one (very long) final scan

Download and run the FREE version of DR WEB
http://www.freedrweb.com/download+cureit/gr/
Turn your anti virus OFF
Click CANCEL to its first question (Unless your happy to lock windows until its run)
Click NO to opening the purchase page
Click START
click YES
It will auto QUICK scan
Pess the STOP button on the right (Unless your happy to quick scan first)
After that set to COMPLETE SCAN the computer and press the 'play' icon
This will more than likely take hours (12 is average!), so leave running overnight or whatever

***DO NOT UPGRADE TO FULL VERSION***

reset the HOSTS file if it asks you

Ok I've run the Dr Web scan. It picked up 8 Java related threats....2 of which were archives which were moved (not sure where to), but I don't think the others were deleted. I went to save the log so that I could copy and paste it for here but at that point my computer showed the blue screen of death and restarted Can't seem to find the programme now to try and look for the log, so sorry for being vague. Is the best thing to do to rerun it?

becky170

Also since doing the HotsXpert scan I have two semi-grey transparent icons on my desktop named desktop.ini, should I be worried? Sorry to be so hopeless....bet you wish I'd never posted now

GunJack

update java after you re-run Dr Web and deleted all the things it finds...and delete the desktop icons, they shouldn't be "real" files anyway.

aliEnRIK

becky170 wrote: »

Also since doing the HotsXpert scan I have two semi-grey transparent icons on my desktop named desktop.ini, should I be worried? Sorry to be so hopeless....bet you wish I'd never posted now

Simply reverse the 'show hidden files folders' option that you opened before

becky170

Ok, Dr Web is currently running. It had previously quaratined what it found. At the moment it has found 6 objects (which it had previously quaratined). Last time after Dr Web had finished I pressed select all and the delete, but I don't think it was able to delete them. Will I be able to manually delete using Malwarebytes again?

The files are currently called:
6661d32a-73a79ba0\folder/Glocker.class
6661d32a-73a79ba0\folder/Colt_M4A1.class
6661d32a-73a79ba0\folder/Sig_552.class
6661d32a-73a79ba0\folder/Zamena.class
6661d32a-73a79ba0\folder/peternova$1.class
6661d32a-73a79ba0\folder/peternova.class

Thanks Bec

cclarke12

I had this a couple of weeks ago. i did a system restore to about 7 days earlier and haven't had any problems since.

Browntoa

system restore won't necessarily remove it all.....;) , assuming it has not disabled the resroe completely

aliEnRIK

becky170 wrote: »

Ok, Dr Web is currently running. It had previously quaratined what it found. At the moment it has found 6 objects (which it had previously quaratined). Last time after Dr Web had finished I pressed select all and the delete, but I don't think it was able to delete them. Will I be able to manually delete using Malwarebytes again?

The files are currently called:
6661d32a-73a79ba0\folder/Glocker.class
6661d32a-73a79ba0\folder/Colt_M4A1.class
6661d32a-73a79ba0\folder/Sig_552.class
6661d32a-73a79ba0\folder/Zamena.class
6661d32a-73a79ba0\folder/peternova$1.class
6661d32a-73a79ba0\folder/peternova.class

Thanks Bec

if you can find them, I see no reason why malwarebytes wouldnt remove them manually

aliEnRIK

cclarke12 wrote: »

I had this a couple of weeks ago. i did a system restore to about 7 days earlier and haven't had any problems since.

The chances of your computer being free of nasties is slim to none

becky170

Right I've deleted everything in the DrWeb quaratine file, so does that mean that I should be ok now and it's ok for me to do internet banking, buy things online again? I've installed avast now as well Thanks again for all the help!