Tech: Re my: Help! Serious Virus Plea.

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: Sandy Mc Lean
Date: 25 Jan 10 - 04:46 PM

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: Sandy Mc Lean
Date: 25 Jan 10 - 04:46 PM

For Windows XP: I'm not sure if Vista is the same.
Click start
Right click My Computer then click properties
Open System Restore tab
Check box

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: wilbyhillbilly
Date: 25 Jan 10 - 03:54 PM

I didn't know it was possible to turn off system restore!

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: Sandy Mc Lean
Date: 25 Jan 10 - 03:16 PM

Are you turning off System Restore before you scan? Perhaps the bugger is reloading from backup files.

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: wilbyhillbilly
Date: 25 Jan 10 - 01:09 PM

I'll try that Mick, thanks.


Thanks John, I didn't know how to do that.

John

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: JohnInKansas
Date: 25 Jan 10 - 12:38 PM

For reference, I think the previous thread was Here, in case any helpers would like to look at what was done before.

John

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: Mick Pearce (MCP)
Date: 25 Jan 10 - 12:32 PM

willy - try this to stop the shutdown: Go to the desktop, right click in some empty space and select Create/New Shortcut. When the wizard starts in the location of item box, type shutdown -a, click the next button and in the name of the shortcut put Abort Shutdown or some name you like. (This is for XP).

If a shutdown starts, double click this icon and it should abort the shutdown. That may give you time to finish a malwarebytes scan. (You might want to download a new copy of that to your desktop and run it from there in case you old copy is compromised).

Mick

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: wilbyhillbilly
Date: 25 Jan 10 - 12:24 PM

Tried that Christina , it did it and said it was clean, but thanks anyway.

Each time I try something I learn a bit more, can't be bad.

John

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: Neil D
Date: 25 Jan 10 - 11:49 AM

Have you tried this? Click Start, then my computer, then right click the c drive, click on properties, click tools and then under error checking, click check now, select "auto fix file system error and scan for and attempt recovery of bad sector, then click start. It may tell you to restart your computer to do this, go ahead and restart it. This usually works for me, afterwards I run my virus scan, just to be safe. Good luck.

                                             Christina

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: wilbyhillbilly
Date: 25 Jan 10 - 11:41 AM

Tried that Dan, it did scan said no infected files found, then just after that the message came up and the system went into shutdown again.

The only scan I could do was the quick scan because if I try the full scan it shuts down after 30 mins so there is not enough time.

Seems to me it is a clever little bugger and makes sure it closes before it is found, if it is a virus of course.

Subject: RE: Tech: Re my: Help! Serious Virus Plea.
From: olddude
Date: 25 Jan 10 - 10:36 AM

first thing is to boot in safe mode, hit f8 when booting
then click start , run and type mrt hit enter

see if the mal software removal tool can get rid of it

try that first

Dan

Subject: Tech: Re my: Help! Serious Virus Plea.
From: wilbyhillbilly
Date: 25 Jan 10 - 09:32 AM

I think I might have celebrated a little early after all the fantastic help I was given recently, when I thought I had eliminated it.

A couple of days later I got this message in a little box. "WINDOWS. The system must shut down because tha DCOM SERVICE PROCESS LAUNCHER TERMINATED UNEXPECTEDLY. This shutdown was iniated by NT AUTHORITY SYSTEM" it then started counting down from 50 seconds before closing.

After it shut down it restarted and came up with this message "DATA EXECUTION PREVENTION. To help protect your system Windows has closed this program. Name. GENERIC HOST FOR WIN 32 SERVICES. Publisher: Microsoft Corporation." Then asks to send error report.

It is now doing this approx every 30 minutes and I cannot stop it. I did a full scan and it found and destroyed two trojans which I thought was the end, but it is still shutting down every half hour.

Anyone help AGAIN please.