
- VIRUS HELP NEEDED
-
Certified Gearhead
- Rep Power
- 19
I JUST REMOVED THIS LAST WEEK!
So I hope I can help you.
Safe Mode does not work. For me, the computer just rebooted every time I tried.
You cannot run anything. You can't install antivirus. I couldn't open task manager. Hell, I couldn't use 'Run' to open notepad.
Heres how to beat it.
Download PSTOOLS from microsoft, or the sysinternals suite.
I don't remember how I got it to install, but I did. It did put up a fight.
I think you can just place the files in c:\windows\system32 if you can unzip them.
Restart your computer, log in.
As soon as you can, open CMD
(shortcut: WindowsKey+R, CMD)
I was able to get into CMD before the program loaded and stopped me.
Run pslist to list processes.
use pskill to kill the process by process ID.
you are looking for a process named by random numbers (##########)
the process ID itself was only 4 numbers.
pskill ####
this killed the process and i was then able to install and run antivirus software.
i used malwarebytes.
superantispyware is also good.
hope this helps.
The virus itself was in
c:\documents and settings\%username%\application data\############
^ I think, might have been all users account.
I just deleted it.
Also, its in MSCONFIG 'startup' so get it there to.
Last edited by jorgen; 11-27-2009 at 12:06 PM.

- VIRUS HELP NEEDED
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules