Is it a Virus?

Goitster

Help

Something has got in my machine. I am unable to scan with AVG or any other of my anti v tools. Unable to restore to an earlier point. Cannot get to a remote site to get a scan. When I d/click on to avg at bottom right screen the icon disappears. Tried in safe mode but no success.

Baffled.

Need some simple help please :-)

Fran

When I had a trojan, AVG vanished when I was in safe mode. I went back at put it on the desktop first in order to access it, then was able to run it. Run anything else you've got while in safe mode too. Turn off system restore before going into safe mode. Good Luck.

Edit - Also update everything before doing this (if possible).

quixy_2

Hi

Try a free on line check at http://housecall.trendmicro.com/

or

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Many trojans disable anti-virus and even restrict access to AV sites but give those a try.

Fran

Goitster sent me this as an email after I emailed the above messages:-

"I am unable to get to system restore as I am brought back to the desktop when I try. So I cannot switch it off. Any links to sites such as those suggested by quixy bring me back to the desk top.
I am not even sure if safe mode is working right as the mouse still works, in the past the mouse is normally disabled.
Thank very much your help.....any ideas where to go next?"

LincsLad_3

Can he get to download Stinger?

Maybe even from another PC and save it to a floppy? Might be worth running that as it sounds like he has indeed caught something nasty.

raymo_2

Are you using windows me?
I had this problem with norton anti virus installed, what I had to do was uninstall norton, reboot and reinstall. I now use AVG so it could be a similar problem.

Hope this helps

Happy Easter.

Ooops! nearly forgot you will need to update

Fran

Goitster says:-

1)
"I will d/l Stinger onto wife's laptop. Then save it to cd, then try it on my pc.
I will let you know how I get on."

I should have said that when I boot up I get 2 error messages saying their
one refers to a file csnss.exe and svhost.exe both applications from c:\windows\system32 but by an unknown publisher, giving me the option to run or cancel. I always cancel, what do you think might happen if I run them?

2)
"still stuck
I will need my machine to boot off a floppy or cd won't I? How do i do that?"

Paul_Varjak

Hopefully someone will come to your aid soon! I have been trying to run my new PC in safe mode to help guide you but it won't go into safe mode!

Paul_Varjak

Come on, surely someone can help Goitster!

Debt_Free_Chick

csnss.exe indicates that this is a trojan. It blocks running of most anti-virus & anti-spyware programs. There's a removal tool here

http://sarc.com/avcenter/venc/data/pf/w32.serflog.c.html

Paul_Varjak

There is a removal tool for this trojan here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.serflog.removal.tool.html

Perhaps, Fran, if you are in contact with Goitster you can send a copy of the above page to him by E-Mail?

Trouble is Goitster seems to be off-line so I don't know how he can download removal tool.