Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Resolved Question

Help, Just Got My 1st Virus

Dec 12, 2011 8:20PM PST

I went onto my computer which is a HP Pavilion a6532f with Windows Vista and it said I had a virus. I ran Microsoft Security Essential & had it remove what it found and then did the same thing with Malware. I also have Windows Defender and Windows Firewall on. Something called Security Shield kept popping up and I kept saying no to it. In the meantime Microsoft SE kept coming up in my tool bar saying it had found a threat and I said to remove it then it would do that again. Since I had to leave for work I turned my computer off.

I don't know if this makes a difference but my router died Sunday and I had to buy a new router. I got a Netgear N300 (WNR2000) and installed it with the cd.

I really hope you can tell me what I need to do to get my computer safe again.

Renee

Discussion is locked

beachangel1 has chosen the best answer to their question. View answer

Best Answer

- Collapse -
Please Try This..
Dec 12, 2011 11:19PM PST
- Collapse -
Will Do
Dec 12, 2011 11:28PM PST

I went and printed out the instructions from the link you gave me. I will do this when I get home tonight.

Thank you for your help,

Renee

- Collapse -
(NT) Let Us Know How It Goes
Dec 13, 2011 12:14AM PST
- Collapse -
I Will
Dec 13, 2011 2:43AM PST

I will let you know how it goes. I really appreciate you helping me.

Have a great day,
Renee

- Collapse -
Not Working, Need Help With Last Step
Dec 13, 2011 8:39AM PST

I'm on the last step where I right click Windows Vista Hosts File Download Link and save target as to the C:\Windows\System32\Drivers\etc\HOSTS and when I click Save it says I do not have permission to save and to ask the administrator for permissions. I am the only one on this computer and under my name it says Administrator. What do I do now?

I look forward to hearing from you and any assistance you can give me so that I can do this last step.

Renee

- Collapse -
Editing HOSTS on Vista Is Finicky
Dec 13, 2011 8:52AM PST

First, instead of saving the HOSTS file to the final System32\Drivers\Etc folder, try saving it to your desktop first.. Once it's saved to your desktop, exit Internet Explorer (because it "locks" the HOSTS file) and restart the computer into Safe Mode. Once there, try navigating to the "bad" C:\Windows\System32\Drivers\etc\HOSTS file that already exists, then RIGHT click on it and rename it to "HOSTS.txt". Once that's done, then copy and paste the "new" HOSTS file from your desktop to the C:\Windows\System32\Drivers\etc\ folder.

There are also instructions in the link below which should help you physically edit the "bad" HOSTS file which currently resides in the C:\Windows\System32\Drivers\etc\ folder

http://forums.cnet.com/7726-6121_102-2488002.html

Hope this helps.

Grif

- Collapse -
It Worked, Questions
Dec 13, 2011 9:21AM PST

Thanks, Grif. Happy I did all of the steps you had except I did not have to change the bad one to say text as I had already deleted it.

Why did I get the virus? I know I've been fortunate in that all my years of having and working on computers I have not gotten a virus.

Could it have something to do with my getting a new router? The reason I ask this is that printer won't print now. It was printing before I got the new router. It will still copy, it just won't print.

Also, in my tool bar there is an icon that says Blocked Startup Programs. What does this mean and do I need to do anything? This message was not there before I got the virus.

Thanks again for helping me,
Renee

- Collapse -
Regarding the "Blocked Startup Programs" Item
Dec 13, 2011 11:45AM PST

There are a couple of ways to go regarding this.. If the EXACT message you're seeing is "Windows Has Blocked Startup Programs", then it could be the result of Windows Defender notifying you of such, or it could be the result of the System Configuration Utility doing so immediately after startup.. Either way, try RIGHT-click ngon the annoying (and ugly) icon in the system tray, select
"Run blocked program" and then "System Configuration Utility". After the UAC prompt, you'll see this dialog message. Check the box for
"Don't show this message or annoy me again when Windows starts".

As to "Why" you got the virus, there are a number of ways, although it's probably not your router. (If you're printer isn't printing and the printer is connected to your computer, then the router has nothing to do with it. If the printer is "shared" on another computer, then you may want to start from scratch in creating your network and sharing files and printers all over again.) Most of the newer malware is actually contracted from the internet, at infected websites, some of which are legitimate websites.. In addition, many folks panic when they see a popup which starts scanning their computer and they are welcomed with a message they are infected and the fix is to "click here".. "Click Here" generally gives the illicit program permission to infect your machine.. There are number of steps you can take to avoid such mishaps. Use a "hardened" browser which doesn't script such websites, doesn't use ActiveX which allows such exploits to occur, and don't simply click on any old item at various sites. You can make Internet Explorer a little tougher by changing its secuirty settings to "High" in the "Internet Options" panel.. You might also try a different browser which already has some of these items set by default.. Google Chrome, Firefox, and Opera are just a few.. They're free and easy to use.

Also be sure to never click on links in your email.. Don't open attachments in email unless you're SURE of what it will be.. Don't visit dodgy websites.. And most importantly, be watchful of the types of exploits that might rear their ugly head.. If something pops up on your screen which shouldn't be there, close the page or press F4 immediately to close the currently screen.

Hope this helps.

Grif

- Collapse -
Thanks
Dec 13, 2011 6:35PM PST

Thanks, that worked too.

I do use IE for things that won't work on Chrome that I also use. I'm careful with all the things you mentioned.

Again, thank you so much for taking the time to help me.

Have a Merry Christmas and Happy New Year,

Renee