Thread: Virus: help!!

So I was checking out some websites last night. I was looking at some stuff and it directed me to a link. When i clicked the link there was a popup that had nothing to do with it. I closed it and then there was another popup, I closed that one too, then my AVG popped up saying it found a few trojans, I clicked to "heal" each one and a couple were successful, the third said it could not be found. I quickly ran AVG's full scan, it continuously found viruses and some would heal and others would not be found. Then I realized that the ones that would not heal were duplicates of the ones that did heal. Not sure why. Anyways, after running the full scan and healing all the ones I could, I closed AVG and it popped up again. It's like the trojan keeps infecting one file at a time or something. Anyways, I also went to housecall micro trend or something like that and ran it. It found nothing. I suppose when I get home tonight I'll run AVG again but is there anything else I can do?

Actually, I was trying to learn about faction in Vanguard so I went to one of the links produced by google when I searched the three keywords: vanguard faction armor. Within one of those links I clicked on a link and that's when it happened.

Anyhow, when i get home tonight, I'll unplug the internet and Run AVG in safe mode. Now remind me again, how do I get into safe mode, F5 or something? Also, isn't symantec Norton. I thought it was and I hate Norton.

symantec is the company that makes norton

get into safe mode by continuously tapping f8 as the computer is turning on or you can go to msconfig and change the boot.ini to safeboot

id say try running malwarebytes, that POS can do anything

Originally Posted by Darkenone86

Originally Posted by Cojiro

symantec is the company that makes norton

get into safe mode by continuously tapping f8 as the computer is turning on or you can go to msconfig and change the boot.ini to safeboot

id say try running malwarebytes, that POS can do anything

I hate Norton also, but its like Squire is to Fender. Squire is norton and it sucks. Fender is symantec and is much better.

I don't have any pop ups or bullshit like I had with norton or avg, so symantec corp edition stays for now.

Malwarebytes is amazing also, poop use this in safe mode also.

Well, I disconnected the internet and ran AVG in safe mode. It found nothing on my system. I then booted up normally and AVG detected something. I tried "healing" it and it was like before. I went ahead and downloaded Malwarbytes then booted up in safe mode again. I ran it and it found 50 trojans. It said it successfully removed them all. I then booted up normally and AVG hasn't detected anything yet. So, this is a testimony to AVG's ability to detect and malwarbytes ability to remove viruses for those who are looking for good programs.

Im going to tell you how to get rid of 99% of viruses.

I know this sounds retarded but believe me this is how some of those viruses are developed...

When you attempt a removal of a virus it may not find it, the reason why?

What some virus developers/companies do is: Install the virus to the system restore module once that is done there is no program other than system restore itself that has access to retrieve or delete files from the system restore module. The only way to delete them is to turn them off.

Symantec and AVG ***cannot*** remove viruses located within the system restore module.

In order to completely get rid of the virus you must disable system restore while in safe mode and then run your scans. At that point you should be virus free and then if you wish, turn back on system restore.

Its a very smart tactic by the virus developers isnt it ?

Originally Posted by Warprosper

Im going to tell you how to get rid of 99% of viruses.

I know this sounds retarded but believe me this is how some of those viruses are developed...

When you attempt a removal of a virus it may not find it, the reason why?

What some virus developers/companies do is: Install the virus to the system restore module once that is done there is no program other than system restore itself that has access to retrieve or delete files from the system restore module. The only way to delete them is to turn them off.

Symantec and AVG ***cannot*** remove viruses located within the system restore module.

In order to completely get rid of the virus you must disable system restore while in safe mode and then run your scans. At that point you should be virus free and then if you wish, turn back on system restore.

Its a very smart tactic by the virus developers isnt it ?

How do you disable system restore?

I'll probably try that tonight. Though I'm hoping malwarbytes was already successful in getting rid of it all.

I do know one thing, I was trying to pay attention to where the viruses were being detected from and they seemed to be infecting a drivers folder initially. Then yesterday malwarbytes found them in my personal settings folder or whatever it's called.

Right Click <My computer> Click <properties> (System Restore Tab) Check < turn off system restore>

Viruses can detect if there deleted from your userdata and or dll files and the rootkit of the virus is usually located throughout the registry and system restore files

Viruses sometimes come back after you think you removed them because of the access restrictions of anti-virus programs not being able to access those files.