HolidayBuyer's Guide

Spyware, Viruses, & Security forum

General discussion

Help removing virus!

by KittyEggs / July 5, 2010 10:35 AM PDT

Okay, so this is some background info.. I'm trying to fix my friend's laptop. The problem was originally with the internet, it would stop working every few minutes which got in the way of games and other things. Neither of us really noticed until yesterday when he tried logging in to a game site and it didn't log him in. I figured it might be because he's using an outdated browser (earlier version of chrome), but it wouldn't be the first time this computer didn't work right. SO, it compelled me to go download an antivirus, which I thought would fix some of the lag and problems. I tried to download avast, got a error page. I downloaded the avast installer on another comp, renamed it, then put it on the laptop and tried again. The installer froze multiple times, and when it actually installed the main program didn't open. I tried downloading MBAM, clicked the installer and got an error. Tried downloading anything I could find, and when I tried opening I got an error. so basically, virus isn't letting me use any AV programs.. and anything I download isn't working either... I would try a factory reset, but thats not on acer comps... some of the errors dialogs http://i49.tinypic.com/ae8bia.png (obviously fake) -- any help?

Discussion is locked
You are posting a reply to: Help removing virus!
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Help removing virus!
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Yes, it is the virus/malware that is blocking you
by Donna Buenaventura / July 5, 2010 10:55 AM PDT
In reply to: Help removing virus!

to install or launch application or setup files.

I suggest to use a clean PC to download Rkill or exehelper to hopefully bypass the malicious processes. Transfer it to the affected computer:

Rkill.exe http://download.bleepingcomputer.com/grinler/rkill.exe
Rkill.com http://download.bleepingcomputer.com/grinler/rkill.com
Rkill.scr http://download.bleepingcomputer.com/grinler/rkill.scr
Rkill.pif http://download.bleepingcomputer.com/grinler/rkill.pif
Exehelper.com http://www.raktor.net/exeHelper/exeHelper.com
Exehelper.scr http://www.raktor.net/exeHelper/exeHelper.scr

Run rkill.exe in normal and allow it to do its job by stopping and ending the task of any found malware process.

Do not reboot when rkill is finished with its task. If rkill.exe will not run, proceed in trying another file format (e.g. rkill.com or .scr or .pif or use exehelper).

If an antivirus is installed already, immediately try opening it then update soon. Scan the system.

If antivirus is not installed, get or use any of these after using rkill or exehelper:

Malwarebytes: http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
SUPERAntiSpyware: http://download.cnet.com/SuperAntiSpyware-Free-Edition/3000-8022_4-10523889.html
MalAware: http://www.emsisoft.com/en/software/malaware/

Install, update then scan Malwarebytes or SuperAntispyware or immediately open the browser to use MalAware scanner.

Collapse -
-
by KittyEggs / July 6, 2010 5:55 AM PDT

okay i'm trying it now, thanks!

Collapse -
----
by KittyEggs / July 6, 2010 9:41 AM PDT

I tried rkill and exehelper, both did their job and then I installed all 3 of the programs, ran them, got rid of all the bad stuff they found. Then I tried downloading something and running it but the comp still wouldn't let me.. tried installing avast, it finished but the program never worked.. Downloaded avira installer, wouldn't let me run it. Sad

Collapse -
That means there's still malware in your PC
by Donna Buenaventura / July 6, 2010 2:38 PM PDT
In reply to: ----

I suggest running another scan using Malwarebytes but try to scan only in safe mode. See if it will still find anything again.

If that will not help, please proceed to using below tools:

http://www.gmer.net/ - this is rootkit detection program but I need you to scan then click "copy". Post here the Gmer log.

To make sure it's not a rootkit/trojan use this tools:
http://support.kaspersky.com/viruses/solutions?qid=208280684

Sophos Antirootkit: http://majorgeeks.com/Sophos_Anti-Rootkit_d5238.html
F-Secure Blacklight: http://www.f-secure.com/en_EMEA/security/tools/blacklight/

Please rename the executable of the rootkit scanner if it will not open.

Popular Forums
icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

The Samsung RF23M8090SG

One of the best French door fridges we've tested

A good-looking fridge with useful features like an auto-filling water pitcher and a temperature-adjustable "FlexZone" drawer. It was a near-flawless performer in our cooling tests.