They install fine but when it comes to actually running the program they disappear. They appear in task manager for about 15 sec and then disappear.
The ones I have tried are: SpyBot, MalwareBytes, Ad-aware, TrendMicro Hijack, Iobit Security 360.
Have tried to run them in Safe Mode but my safe mode is disabled and just restarts the computer. Help, anybody. What to do. And please don’t answer REFORMAT.
Best bet would be System Restore to back before you got the virus.
Start > Run > type or copy/paste RSTRUI.EXE
Press OK or Enter
It would be best to run this in ‘Safe Mode’.
You say you can’t get SM so try this
Click on Start, then Run. In the Run dialog box type "msconfig" and press enter to start the MSCONFIG utility. MSCONFIG offers a variety of options and settings you can use to selectively enable or disable certain programs or services to try and troubleshoot and narrow down problems you might be having. You can view the contents of the System.ini, Win.ini and Boot.ini files and check or uncheck the items you want to start. You can also uncheck services or programs that startup when Windows loads if you don’t want them to start.
For our purposes, we just want to use MSCONFIG to boot into SafeMode so we can run our antivirus software scan or a virus / worm removal tool to get rid of malware on the system. If you click on the Boot.ini tab you will see some checkboxes at the bottom under Boot Options. Click the checkbox next to /SAFEBOOT and select Minimal (if you really need network access while you are in SafeMode you can select Network instead).
After you make the changes the computer will need to be rebooted for the changes to take effect. The computer will boot into SafeMode and allow you to do what you need to do to clean any malware or other malicious software from your system. Once you have completed the actions or tasks you needed to use SafeMode for, you need to reopen MSCONFIG following the instructions above and uncheck the /SAFEMODE box under Boot Options so that the computer will boot into normal Windows mode the next time you start it up.
You may be screwed unless you can somehow stop the thing from loading. As soon as you log in, look in the task manager for something out of place and end the task quickly. They try to remove it again. Otherwise, use system restore or sorry, reformat.
Just for fun, rename malwarebytes to zep.exe, see if it runs….
Try:
http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller
As for TrendMicro Hijackthis save it to desktop right click it & rename it & it should run.
You may need to pull the drive and run a scan on it from a clean computer. I know that sucks, but if you absolutely need to save the install, may be your only option.
Here is an ActiveX Based scanner from Microsoft. If you’r computer can run the web, it may be able to get through the scan. It’s also fairly decent: http://onecare.live.com/site/en-us/default.htm
Just click "Full Service Scan" and run it. Good luck!!
good call, zep…
some of the viruses today are programmed to actually disable and not allow certain antivirus programs to run… a simple rename can bypass this alot of times.
Try to take off the hard drive connect to another computer, rename the virus file name. or scan from that computer.
OK first..don’t install or download any thing directly to your computer ..
download to a usb flash drive or any other media removable..
this toll will help you just download and run form a pen drive or cd..
http://www.avast.com/free-virus-cleaner#tab2
How this Work,,,…
The operating system memory will be scanned, and if any known worm is found, the worm process is terminated – thus avoiding further spreading. If it is not possible to terminate the worm process (it could happen e.g. with Nimda worm that uses a fake library to run inside other processes), the worm will be deactivated in memory to stop its spreading.
Your local hard disks will be scanned.
The "startup items" (such as the system registry, Startup Folder(s), etc.) will be scanned. References to worms found in memory or on disk will be removed or fixed.
Infected files, identified in point 2, will be removed or fixed (as needed).
Additional working/temporary files created by the identified worms will be removed.
If restarting the computer is needed to finish the disinfection process (e.g. when a file could not be removed because it was currently in use, or if the deactivated worm process is still present), the user is notified and asked whether the restart should be done immediately.
You may be knowing the infection type like virus name or
There must be any problem in your PC due to the virus like you can’t excess Folder Option etc
Search google with a question Like…
I can’t access folder option ?
Search for manual solution like registry tweak… or something to do with windows programs itself
You may remove the problem
I personally done this many time and solved very complected problem and rarely I think about formatting
Does the virus have a name like Vista Antivirus 2010 which is a bogus program that has been getting on computers without people knowing about it until nothing works.
if your computer is now infected with viruses and/or spyware.
You should use an antivirus program and antispyware software.
Here you have more information on computer security, as well as good and free programs that you can download into your computer:
http://adware-scan-online.com
All are safe and can be trusted and you can download one.