safety anti spyware

[mac71671]

Got this lovely little virus a couple days ago on the other computer and cannot get rid of it. It stops me from opening any programs like malwarebytes which i need to update and run. As a matter of fact, it also doesnt allow the desktop icons to be displayed. I have no clue what to try. Recently bought AVG which i thought would stop these programs from popping up but guess i was wrong. ( thanks AVG). Anyone have any ideas on what i could do?

[budz]

boot into safe mode and run AVG & MALWAREBYTES. if you can download AVAST freeware and run that too.
go to trendmicro.com and use their free online virus/spyware scanner.

[mac71671]

Running malwarebytes in safe mode atm, but in the past when i tried updating and running it in safe mode it would say it had updated but i would have to find a way to run the update again from the regular desktop before it would work. Avg gave me a message that only line? whatever that it works in safe mode.

[jman98]

Recently bought AVG which i thought would stop these programs from popping up but guess i was wrong. ( thanks AVG).

NOTHING can 100% prevent you from being infected. Not AVG (I happen to like and use AVG), not Avast, not Norton. Nothing. They can attempt to prevent infection, but nothing works 100% of the time.

The best virus prevention program there is is YOU. Not clicking on things you shouldn't click on, not opening questionable files, not going to questionable websites, not downloading warez, etc. are all great ways to prevent infection.

[mac71671]

Updated and ran malwarebytes in safe mode. It found 2 items but safety anti virus icon is still on desktop on reboot. Avg was left running over night till this afternoon and it was running so slowly i gave up on it.

[jagabo]

If you have another computer: Be sure the other computer has auto insert notification turned completely off. Remove the infected drive and put it in an external USB or eSATA enclosure. Attach the external drive to the second computer and run all your antivirus and antispyware software from there.

[mac71671]

Im a complete newb, what is auto insert and where do i find it to turn it off?

[jagabo]

Auto Insert Notification is the feature of Windows that allows removable devices to automatically run a program when they are attached to the system. You want to disable it to prevent the secondary computer from getting infected when you attach the infected drive to the USB/eSATA port.

Do a Google search for it. Be sure to disable it system wide, not just for the CD/DVD drive.

There are a few antivirus programs that will let you create a boot CD to run them. This is essentially the same thing. The problem is this: if you boot the infected drive the malware may already have gained control of the computer by the time you can can run any antimalware apps. Even in safe mode.

[Ai Haibara]

This is one of those malwares that tries to install itself from ads you're viewing online, as I recall - even on legitimate sites. (I can't remember if it's the same one that would give you the ad that tells you it's installing even if you try to close the window.)

Try this (you should know what you're doing for this - if you're not sure, don't attempt it.): Open the Start menu, and click on Run... Enter the following in the Run window:
%appdata%

This should pop up your Application Data folder. Scroll all the way through it. Are there any .EXE/.DLL files at the bottom (not in any subfolders)? Especially anything with a name resembling "Safety Anti-Spyware".
(If you can't see the .exe extensions, select Folder Options... from Explorer's Tools menu, go to the View tab, and remove the check in the box next to "Hide extensions for known file types". Click OK.)

If you find any EXE files, note their filename. (You might want to ask someone here, just to be safe.) Open Task Manager by right-clicking on the taskbar, and choosing it (or hit Ctrl+Shift+Esc). Are there any processes matching the .EXE's name? Right-click on that and select End Process. If the process closes, and doesn't come back, try running your antivirus and anti-spyware/malware scans.
It does install a startup entry, though, so it'll come back on startup if it's not gone, and you reboot.

[Bjs]

Guide from Bleeping computers here ... very simple

[hech54]

Guide from Bleeping computers here ... very simple

Viewed almost 2000 times. That must be a "popular" one (safety anti spyware)....for lack of a better word.

[MOVIEGEEK]

Try SuperAntiSpyware and Avast Free AV, it's what I use.
Also try a system restore in safe mode and if all else fails do a clean install.

[mac71671]

Used the resore point to fix the comp. thx for the idea. Completely forgot about doing that. This is one nasty bug, first time malwarebytes didnt work. The virus removes all desktop icons and even the start button at the bottom is gone. Also wont let you open task manager. Hope this info is useful to others.

[MJA]

back up and format.just be sure the backup is clean

[jagabo]

Good malware deletes the restore point data. Or infects it too.

[MOVIEGEEK]

Now that your PC is working ok go to My Computer and delete all restore points(turn off), then turn it back on.

[isogonic]

Safety Anti-spyware:
One of many many rogue scareware apps. Malwarebytes should be able to remove it. Some of these rogue apps can install plenty more though. Be on the look out for possible web page redirects.

Also try a system restore

any self respecting malware will infect the restore archive

[MOVIEGEEK]

any self respecting malware will infect the restore archive

That's why you should turn off system restore.

[isogonic]

That's why you should turn off system restore.

Any restore point malware infected or not is better than no restore point. Once malware has been *removed* is when its time to clean out the old restore points and make a new one on a clean system.

[jagabo]

System Restore is useful for recovery from many other problems, not just recovery from malware. Leave it on. Or perform very frequent backups.

[isogonic]

System Restore is useful for recovery from many other problems........ Leave it on.

Iam not suggesting that you leave it off.

Malware can infect the restore archive. Once malware is removed and computer appears to be ok:
turn it off, reason:
to delete possible *infected restore points.*
then you;
turn it on, reason:
to make a new restore point on a *clean system*


(winXP)

1. Turn off System Restore. (*deletes old possibly infected restore point*)
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

2. Reboot.

3. Turn ON System Restore.(*creates a new restore points on a clean system*)
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK, then reboot

[jagabo]

System Restore is useful for recovery from many other problems........ Leave it on.

Iam not suggesting that you leave it off.

Sorry, I was replying to MOVIEGEEK's comment where it sounded like he was suggesting not using System Restore at all.

[MOVIEGEEK]

I wasn't suggesting to turn it off permanently either I was simply reinterating what I wrote in the earlier post, turn it off to delete the restore points that are infected by malware. While you're at it you should delete any quarantines from Malwarebytes,etc.

[johns0]

I found a pest program that couldnt be detected by ani virus programs,the name in task manager is aoswsys type of exe and when you boot up it activates the program after about 30 seconds depending how fast your computers starts.

What it does it not let you open task manager or regedit or similar programs and says you have a virus detected on your computer and needs to be deleted and asks to do this,what i found is to reboot the computer and open task manager as soon as

you can and end process of the aoswsys file,then you do a search for the file name and delete it and turn system restore off and then on and check for the file name in regedit.

Might be this type of pest program.