Virus Protector

[mac71671]

Got yet another virus. In the past I could go to safe mode and run malewarebytes, but this one even runs in safe mode and stops me from seeing the desktop or opening task manager. Any ideas?

[hech54]

SuperAntiSpyware's Portable Scanner:
http://www.superantispyware.com/portablescanner.html

Perhaps?

[hech54]

http://www.bleepingcomputer.com/virus-removal/remove-virus-protector

I also use BootSafe (comes with the normal SuperAntiSpyware) to get to Safe Mode.....comes in VERY handy.

[mac71671]

I downloaded it and put it on a jump drive but when i insert it in the computer, it wont let me access the drive to install. I know of no way to get rid of their screen. I cannot get to the desktop even in safe mode.

[MJA]

I downloaded it and put it on a jump drive but when i insert it in the computer, it wont let me access the drive to install. I know of no way to get rid of their screen. I cannot get to the desktop even in safe mode.

if nothing works. try live Linux CD and clamAV

or try NOD32

http://kb.eset.com/esetkb/index?page=content&id=SOLN2103

by the way.whats the name of the virus?

[mac71671]

But how am I going to open the jump drive to run it?

[aedipuss]

i'd try control/alt/del and bring up the task manager. go to processes and kill any that are look like they belong to the virus. then you should be able to run malwarebytes.

[MJA]

set your PC's BIOS to boot from your thumb drive/USB/removable drive

[Verify]

1. Turn of power, wait at least 5 seconds
2. Turn on power
3. Repeatedly press the F8 key (or which ever key gets to the BIOS)
4. Change BIOS boot settings so that boot from CD is enabled and has priority
5. Save settings and with Linix CD in drive, continue booting

[pepegot1]

Now you know why an image backup is so important!

[MJA]

Now you know why an image backup is so important!

not the right time for that

[mac71671]

I downloaded it and put it on a jump drive but when i insert it in the computer, it wont let me access the drive to install. I know of no way to get rid of their screen. I cannot get to the desktop even in safe mode.

if nothing works. try live Linux CD and clamAV

or try NOD32

http://kb.eset.com/esetkb/index?page=content&id=SOLN2103

by the way.whats the name of the virus?

Just calls itself Virus Protector. Tried opening removable drive thru bios but it failed.

[mac71671]

Its my neices comp. She bought an Emachines and it didnt come with a recovery disk. After restart and hitting F8, there is an option to restore to an earlier time, but the virus is still there after booting.

[HotDamn!]

Ctrl, Alt, Delete then try to end all tasks that you can and check to see if there are any funny looking processes running as mentioned above, maybe google them to be sure, and stop those. If you can after all of that go to control panel and delete the program if you can or just try to run a scan.

[Verify]

See: http://www.bleepingcomputer.com/virus-removal/remove-virus-protector

Also: https://forum.videohelp.com/threads/319315-System-security-2009-automatically-installed

[mac71671]

Ctrl, Alt, Delete then try to end all tasks that you can and check to see if there are any funny looking processes running as mentioned above, maybe google them to be sure, and stop those. If you can after all of that go to control panel and delete the program if you can or just try to run a scan.

It blocks task manager from opening.

[classfour]

rkill.exe - see what the thing is (should post a list of killed processes). If rkill shows more than itself: That's the one.

[jimdagys]

I would get Process Explorer
which is a substitute for the Task Manager when the Task Manager doesn't work.
You can get Process Explorer and directions how to use from here:
http://www.bleepingcomputer.com/virus-removal/remove-system-security

[MJA]

is it the same like this one?

Virus Protector



http://www.youtube.com/watch?v=nQzZkbVnu0Q

[mac71671]

is it the same like this one?

Virus Protector



http://www.youtube.com/watch?v=nQzZkbVnu0Q

Thats how it started out. Now it covers the whole screen. You cant see anything of the desktop, not even the task bar with the start button. Hitting control alt delete doesnt work even in safe mode.

[freebird73717]

http://virushelp.forumotion.com/security-software-f3/clean-an-infected-computer-with-u...windows-t4.htm

http://virushelp.forumotion.com/security-software-f3/clean-an-infected-computer-with-u...boot-cd-t5.htm

[mac71671]

Gonna try the boot dvd ides with Linux and see if that will work. Its 1.3 gigs so itll need to download overnight. Ill post again tomorrow and let you know if it worked. Thx for the replies all.

[aedipuss]

this linux cd version is 90MB if you want to save some time.

http://www.freedrweb.com/livecd/

[Nelson37]

You are definitely going to need a boot Cd for this one. Disconnect the Internet cable!!!!!

Look for an "AV" or "AVS" exe file in the applicaton data directory. Scan system32 for garbage-name DLL files. CCleaner on the registry and to remove temp files. ComboFix also helps. Try logging on as a different user.
You may need to change the name of MBytes to get it to run.

Don't forget to wipe out the system restore files and then turn it back on when you are done. You may need to delete and re-create the user.

You can not depend on an on-line description. These SOB's morph tremendously. Some run in Safe Mode, some do not. The full-screen behavior does not happen on all variants. Some run for all users, some only the original. Most re-direct EXE files after repair. Some retrieve a Massive virus payload during repair. Some make multiple DLL's in system32, some only a few. Recent dates, or historical timestamps. Some had no date or time at all, referring to the DLLs, again.

[mac71671]

F12 opens the bios and i selected boot from cd. It highlighted the dvd rom drive and i selected it then hit enter. But the computer tries to go to the regular desktop instead of opening the dvd. Any idea where i went wrong?

[HotDamn!]

did you hit F10 to save the settings and then restart the computer?? It sometimes will ask you to hit a button to boot from the disc also and if you don't hit a button it will just go on

[mac71671]

It doesnt prompt me to hit any key to save or continue. Just says hit enter to select dvd drive to boot from. I just tried using f10 but it still tries going to regular desktop.

[HotDamn!]

You need to save it in BIOS, mine is F10, you just need to find out how to save it.

Go Google your computers owners manual and check the BIOS area of the manual.

[mac71671]

Im ready to give up. Im telling them they need to take it to a computer guy and have it fixed. i just dont know enough about computers to do this. I appreciate all the responses tho.

[HotDamn!]

Im ready to give up. Im telling them they need to take it to a computer guy and have it fixed. i just dont know enough about computers to do this. I appreciate all the responses tho.

Well computer techs around where I live, especially best buy, over charge so don't give up

If you tell me the computer's name and model I'll tell you how to save it. After you get it to boot and what not maybe save the photos on a flash drive and I'll walk you through on how to reformat it, if they still have the disc that is. It will save them quite a bit of money

People will say "no, don't reformat just do a virus scan". Well that will get rid of some crap but its not all that difficult to reformat and the virus may still be hiding and who knows what got messed up...