UNSOLVED
Trying to get rid of a virus
I posted this on another page and was told to come here. The gentleman tried to help and then sent me to this site. I copied and pasted what I had told him on the site. Will it help? Can you help?
:smileysad:
I don't know if this is the right place to be and if not please send me somewhere else. My granddaughter has a new laptop which came with Vista. She now has a virus (I think....antivirus 2009). I cannot get it off with her antivirus and attempted to install a new one. I think that I might be able to remove it manually if I could find the search for files menu that I have with XP. Can you or someone tell me where to find this on Vista? Thanks for any help.Thanks for helping me. I connect to the internet but cannot bring a page up. It just sits there and only half loads. That is why I thought I might be able to manually delete the files if I could find where to go to get the search file menu. On my XP I go to start and then search. I can't find it on Vista.
I can't download a page to (i.e... Google, msn) in order to download anything. I am connected but I have been trying to open my browser for approximately 30 minutes. Do you know of a way I can see the files on the computer? If I could find them I might be able to delete the infected folders. At least long enough to download the site you need me to go to. Is this something that sounds reasonable? I have never had this problem on our other computers
Mr.Kevinhelperg
24 Posts
514
0
Posted August 17th, 2008 13:00
What antivirus are you using?
If you have an antivirus scan it and see what it finds and post back here
To answer your question, this link will show you the associated files and registry components. I do not recommend doing registry editing unless you are experienced at this.
http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009
Note: These infections may leave remnants and/or are blended with others. I advise you to post back here if you have problems after cleaning or want a review of the MBAM log (see ky331's post above)."antivirus 2009" is a ROGUE/deceptive program.
in general, it is not detected by anti-virus programs.
is IS, however, detected by certain anti-malware programs, such as MBAM. which is why i specifically suggested MBAM be used in this case.
dana,
as i outlined in message 4, anti-VIRUS programs do not detect "antivirus 2009".
please download, install, and scan with MBAM, per my suggestion in message 2... and as mentioned by BugBatter as well in message 5.
Message Edited by ky331 on 08-17-2008 07:01 PMOk this is what malware found...
I Item Found
hkey_current_user/software/microsoft/windows/currentversion/explorere/advanced/start_showsearch(hijack.startmenu)
It said to restart which I did. When it came back up it showed that I was connected but still will not let the open MSN which is what my granddaughter uses as her start page. Is that a browser?
What should I do next?
Thank you in advance for you help.
Dana
there is an MSN browser. there is also an MSN(dot)com webpage, which some people choose to be their "home page" in ANY browswer (e.g., Internet Explorer). so i'm not exactly sure which one you were referring to.
i believe "antivirus 2009", a rogue malware program which is what you originally questioned, should/may be a separate matter from being unable to open the MSN browser [or from opening any browser but not getting to the MSN homepage].
here's what you should try next. since it's now not quite clear what your problem is, it's best to run a diagnostic tool which should help reveal exactly what's happening on the system:
Download the latest version of Trend Micro's HiJackThis (HJT) [version 2.0.2] installer from.Save it to your Desktop..Double-click on the HJTInstall.exe file you just downloaded, and click on the Install button, to install HJT in the suggested/default folder,C:\Program Files\Trend Micro\HijackThis.( As part of the installation, a shortcut to the HJT program will be placed on your Desktop, and another shortcut in your START menu [for easy-access to using HJT in the future ---you only need to run the program again, but not the installer ] )..After installation, HJT will automatically open and start running.[If this is your first time running HJT, please read and accept the EULA (End-User License Agreement)].Click on Do a System Scan and Save a LogFileThis will automatically open NotePad
Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy
Then go to the forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:
http://forums.us.dell.com/supportforums/board?board.id=si_hijack
Be sure to include a detailed description of any problems/errors/warnings you are encountering.
Also, please indicate the steps you've already taken, if any, in terms of running anti-malware scanners or malware removal tools.
See if you can locate the complete MBAM log, and copy/paste it along with your HJT log.
When you submit your HJT log, please make sure the box under your text which shows "Automatically convert carriage returns to HTML line breaks" is checked, or your log may not format correctly... it should consist of separate/readable lines, not one large "jumble".Hopefully, one of the HJT experts will get to it as quickly as possible.
WARNING: HiJack This is a VERY POWERFUL tool. While it's completely safe for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!! Improper use of this tool can severely damage your system.Message Edited by ky331 on 08-17-2008 10:03 PM
ky331
5 Journeyman
•
15640 Posts
•
45086 Points
514
0
Posted August 17th, 2008 11:00