virus help please

[Marsoc1]

Hey! I got the same virus!

It liked to redirect me to porn sites. At least it was normal porn.....

Its not the same, its called ransomware, basically locks u out to the net unless u buy their "anti-virus" program. Ive dealt with it a few time and manually removed it, its a sneaky one tho.

No need to reinstall ur OS every time u think u got a virus, a lil elbow grease can save ur OS. Honestly do u really wanna set up ur system the way u liked it all over again, did u write down every setting u changed to ur liking? might be a bigger headache than it already is.

[Dankle]

We had the same infection on some of the work computers from people using the company internet for personal use. (Like I do daily, except I only visit Calguns and GDR ) I used RKill, to kill/end all known malicious processes, and Malwarebytes to rid the systems of the infection. If you go this route; you may have to open/run Rkill twice. With my infection I opened RKill and an error popped up saying some BS, I left the error message up (didn't click anything) and ran RKill again. After the second run of RKill I could tell it did what it was supposed to do. I then ran a full scan with Malwarebytes and it was G2G after that.

Yes, you can DL both programs to a flash drive and run them from it.

[GunNutz]

If system restore doesn't get rid of the problem: download malwarebytes and closely watch the folder it installs to. (The exe mbam will often be deleted by malicious code, but you usually get a few seconds of slack.) Rename the file quickly. Run this reboot and run again. If the system keeps getting reinfected disable system restore and try again. (You may need to do this manually -I've seen some of these remove the option from the GUI.) Also download highjackthis and see what it comes up with.

Be sure to save the names of any malicious code which is identified during the scans. You can sometimes find manual removal instructions in case all automated tools fail.

Also, you may need to get something like killbox to assist in the "cleansing."

Good luck.

[jwb28]

Update on my virus.
Well I couldn't remove it so I had onlinecomputerrepair.org do it. It took them 3.5 hr if you count download, wipe, and all the other processor time. I hope it's fixed, the computer was defraging when I had to leave. I'll find out for sure late tonight.
Should have waited and tried the copy and rename trick in post 7 or 8 but the online people were real nice. they used their fix it software and installed and ran Malwarebytes, Avast, and atleast rac CCleaner, not sure if they installed that one.
Thanks for all the help and the PMs. I tried to do what the site you recommended Marsoc1, but it wouldn't let me. I got the path to virus down but when I got to Apps... folder it would not give me access and the folder I thought held the virus I could not rename and delete. I guess the damn thing is evolving, or I had multiple problems. it was the AV security thing.
Anyway the last computer course I took was Fortran and we used a card reader to write our "programs" on. So I'm not tech savy. If it works when I get back call it lesson learned the hard way. Avast and Malwarebytes are on that computer now so hopefully no more problems.
Thanks agaain everyone

[code33]

I've had good success with Kaspersky Rescue Disk. It boots to Linux and gets rid of OS infections well. Especially viruses that run during the boot process.

[WTSGDYBBR]

I can't even reply to this thread looks like all the pros put everything you could do. Look into Kaspersky internet security and antivirus you will get 0 virus . The internet security will block worms remember you should buy a router to protect your internal IP's of your network. Many users will plug there pc direct into there Cable modem or dsl connection. When users plug direct into there modems your pc is exposed. Any open ports on your system firewall will get infected . If you fail to do your windows updates or IE updates you will also get owned. You should download Firefox as well.

[bbguns44]

I had the same problem 2 days ago. The easy solution was to let Microsoft fix
it. Called their PC safety number & the tech took control of my PC & deleted all
of the virus files. 15 minutes, totally free. Interesting to watch her navigate around
my PC & delete files.

[jwb28]

Whats the microsoft #. I didn't know you could that.
Anyway, Im on the problem computer now and it seems to be working fine. Also trying to use Firefox, but the favorites list thing I don't like. At least so far. Is there a Firefox for the computer challenged.
Like I said in the original post this computer is actually at my parents and they know pretty much nothing about them. Hell I'm not a whole lot better, but it took a while to get my dad to surf on IE. Now if he has to learn Firefox.
Anyway, to hijack my own post. Is avast and malwarebytes a decent level of protection? I'll try and find out about the program that starts with K. can't see the name right now.
Anyone remember Xtree and batch files? That's about when I felt half way competent messing with computers.
Thanks again

[code33]

Avast & Malwarebytes are very good. Superantispyware is as well.
All free. Scan with those in conjunction with Kaspersky.

[CAL.BAR]

WTF! Kaspersky saw the virus coming, warned me and then said it couldn't be quarentined. So I had to kill it 2x!.

[code33]

Kaspersky Rescue Disk or the version installed in Windows?

[Sinixstar]

Hey! I got the same virus!

It liked to redirect me to porn sites. At least it was normal porn.....

oh... uhh... yea.... that porno virus...yea... i got that one too.
Damn thing went out and ordered a freakin external drive from newegg, and filled it up with porn.

damn... viruses...

[NIB]

I just got rid of it on my friends computer. It took a few hours but what I did is first run a virus scan in safe mode. That got rid of a bunch of stuff. Then I downloaded malwarebytes on my computer to a thumb drive and installed it on her computer. I then ran malwarebytes in safemode again and that took out about 130 different infected files. I then used Hijack This and took out anything suspicious looking. That took care of it but like I said it took a few hours to get it done.

[Dangerpin]

With that heavy level of infection you might want to consider running Combofix or another rootkit detector on it as well.

[todd2968]

System restore will not help
Go to www.filehippo.com and download malwarebytes it is the only thing that helped me it is free and it is priceless