15 replies to this topic

[Georgina]

I got another bloody virus! I mean wtf???

I dont know what im doing wrong!


Anyway - its stopping me open any progs, including malware bytes nd SUPERAnti Spyware. Bringing pop ups all the time telling me i need to activate my anti-virus (lol) and then taking me to a webpage if i click yes.


Whats the best way to get rid please?

[WakaWaka]

disconnect your internet.
do you know the program the pop up is advertising? if so..
go to control panel>Programs and features(if using vista) to see if the program is listed...then uninstall it.
Try running your malware bytes etc...
Btw what kind of real time Antivirus you got?

[Waser Lave]

Google the information about the particular virus and there should be instructions on how to get rid of it.

[Frank274]

Best way? IDK. Maybe try to manually find the file the virus is in?

Easiest way? Get a new computer

[iargue]

Fail.


Turn off your computer. Start it pressing F8 over and over as fast as you can. Choose Safe Mode With Networking. Download Combofix from here, and follow the guide. (http://www.bleepingc...to-use-combofix) (The site is down temporarily. Just wait on it).


If your internet is not working, click on Tools > Internet Options > Connections > Lan settings and uncheck the use proxy server box.

[Georgina]

thank you all for your responses!

I tryed the first one (control panel etc) and trying to uninstal i only got message "The feature you are trying to use is on a network resource that is unavailable" So that didnt work....

I shall google now, and then try argues method i shall keep you updated ....bleh - getting them so often latley


EDIT: Virus is "antivirone" malware (i think)

Edited by Georgina, 14 August 2010 - 08:52 AM.

[Metigue]

I've had this, it installs itself as an addon to your browser, The first step is to disable that part of it. And I don't really remember what I did next, I think I used SS&D to remove it.

[luvsmyncis]

I've gotten that virus twice. The first time I cried like a baby because I find dealing with computer issues very frustrating.

http://www.ehow.com/...lert-virus.html

I used the program Ad-Aware, which is available for free somewhere in the internet, to get rid of it. It's kinda tough, because the virus doesn't let you open shit. I restarted my computer, started an Ad-Aware scan before my computer could do anything else, and just let those pop-ups come until Ad-Aware quarantined the bullshit. I had to disconnect my internet, because periodically the virus opens windows to viagra.com, adult.com, and god knows what else. And I wasn't really in the mood to see pee pees.

[iargue]

Omg. Everyone get out of this topic. Your all giving her bad advice. Stop trying to help, and just let the professional take over.

I am almost positive you do not have the same virus. There is over a thousand fake anti-virus virus's out there. Each one works, and acts differently. I know how to remove them. I've removed them a million times.

Thanks for being helpful, but at this point what she needs is real solutions that will work, not hopeful guessing based upon past experience.

Since I will be going to work in 10 minutes and cannot help you with your various error messages. I'll just do it all now.


If you remove the proxy server, and still cannot get online in safe mode. Download the file from another computer and transfer it over.

If the program will not run (Your doing this in safe mode). And you dont get a message from combofix telling you why it will not run. Right click the file and rename it to 1337.exe and then try again. It should run now.

If Combofix says it cannot run on your system being its 64bit or an unsupported operating system. Download and run http://www.malwarebytes.org/

If Combofix gives you a time error, run it in reduced functionality mode first, then run it again after it removes stuff.


Post back your results. I get off work in 10 hours, and I can help you then if you need more assistance.

(Also. Googling it is stupid. You will most likely download another rogue antivirus in trying to download a removal tool. Just follow my steps.)

[Georgina]

thank you argue, im in safe mode now

(punk your face looks HUGE!! ahaha)


But yeh, malware and SUPERAntisyp are running now, nothing blocking me. I can get on FF no problem, and ive unchecked proxy settings in IE.

I feel i owe you money argue the amout of comp help u give me lol.

[luvsmyncis]

Omg. Everyone get out of this topic. Your all giving her bad advice. Stop trying to help, and just let the professional take over.

THE PROFESSIONAL BUTTHOLE. 

Have fun at work for 10 hours while I sit at home, relaxing and living the good life.

I feel i owe you money argue the amout of comp help u give me lol.

Save your money. You can pay him in Shower Pics.

[Metigue]

Omg. Everyone get out of this topic. Your all giving her bad advice. Stop trying to help, and just let the professional take over.

I am almost positive you do not have the same virus. There is over a thousand fake anti-virus virus's out there. Each one works, and acts differently. I know how to remove them. I've removed them a million times.

Thanks for being helpful, but at this point what she needs is real solutions that will work, not hopeful guessing based upon past experience.

Since I will be going to work in 10 minutes and cannot help you with your various error messages. I'll just do it all now.


If you remove the proxy server, and still cannot get online in safe mode. Download the file from another computer and transfer it over.

If the program will not run (Your doing this in safe mode). And you dont get a message from combofix telling you why it will not run. Right click the file and rename it to 1337.exe and then try again. It should run now.

If Combofix says it cannot run on your system being its 64bit or an unsupported operating system. Download and run http://www.malwarebytes.org/

If Combofix gives you a time error, run it in reduced functionality mode first, then run it again after it removes stuff.


Post back your results. I get off work in 10 hours, and I can help you then if you need more assistance.

(Also. Googling it is stupid. You will most likely download another rogue antivirus in trying to download a removal tool. Just follow my steps.)

No, it's definitely the same one I had before. As long as Georgi got the correct info with her google.

And my advice was sound. About 96% of this type of virus installs itself as an add-on to your browser preventing internet access.

and I'm not the biggest fan of Combofix or MB, but they should work so I'm not going to give her conflicting advice.

[Georgina]

Whooooo


IM CLEAN!!!!

Thank you all you deserve a gift of somesort. If you can get to my house i have lots of Cava you can have....

[Faval]

The variants of that malware are running rather rampant. If you use firefox you should probably run noscript but even then you never know where they're hiding when you pass by a site. I've ran into this several times while working for different offices, it's annoying since it just downloads itself into your user documents directory so it doesn't need permissions to install and run. Windows should fix that...somehow.

Edited by Faval, 14 August 2010 - 12:20 PM.

[Georgina]

The variants of that malware are running rather rampant. If you use firefox you should probably run noscript but even then you never know where they're hiding when you pass by a site. I've ran into this several times while working for different offices, it's annoying since it just downloads itself into your user documents directory so it doesn't need permissions to install and run. Windows should fix that...somehow.

Yeh i should really check into this noscript...

Tbh though i think i keep getting shit off tvshack coz im forever getting popups and warns on there, cant really think where else i go that it could cause it

[Waser Lave]

Yeh i should really check into this noscript...

Tbh though i think i keep getting shit off tvshack coz im forever getting popups and warns on there, cant really think where else i go that it could cause it

iargue says, "Try icefilms.info".