Forum Home
Press F1
 
Thread ID: 122354 2011-12-16 23:43:00 Security Sphere 2012 Lurking (218) Press F1
Post ID Timestamp Content User
1248995 2011-12-16 23:43:00 This is a bad one, have tried all the cleaners as advised on here and in safe mode too.

It even won't let the old RegCleaner I have used in the past in either.

Don't want to but it looks like a re-install will be my last option.

Just as well wifey's pc here is okay.

Won't even let programs off the net to download.

How it got through is anyones' guess, although there have been a lot of emails from the family history groups I belong to withh attachments, would have thought they would be clean.

Lurking.

Ps. we have a XP re-install file on the infected pc which we can use, but thought we would try our wizz kids on here as a first option.

lurks.
Lurking (218)
1248996 2011-12-16 23:48:00 Follow this (www.bleepingcomputer.com). First thing I would do is boot into safe mode / networking and delete its entries in startup with ccleaner. If you want help get teamviewer install it, then send the ID and pw it gives you to me in a PM Speedy Gonzales (78)
1248997 2011-12-16 23:52:00 Try this :)
www.bleepingcomputer.com
feersumendjinn (64)
1248998 2011-12-17 00:00:00 Thanks for the quick reponse.

Have to go down to New Brighton market, wifey needs some help, she sells greeting cards etc, someone has to make money around here, lol.

Will tend to the replies when we get back.

Thanks,

Lurking.
Lurking (218)
1248999 2011-12-17 02:45:00 It even won't let the old RegCleaner I have used in the past in either.
.
regCleaner??!!
Throw that away.


Your arsenal should include Nod32, Spybot, MalwareBytes, all updated weekly, and Hijackthis.
pctek (84)
1249000 2011-12-17 03:42:00 regCleaner??!!
Throw that away.


Your arsenal should include Nod32, Spybot, MalwareBytes, all updated weekly, and Hijackthis.

Hi folks, this is tougher than I thought.

Speedy: SS won't allow TeamViwer in !.

feersumendjinn: no luck here !.

pctek: RegCleaner might be old, but at least it tells one what's new from old !.

Wonder if it will do a HJThis log will try and report back.

Lurking.

Ps. as an aside our PCGuru sent their Xmas email Thursday !!! but we are sure he wouldn't be touting for business, lol.

lurks.
Lurking (218)
1249001 2011-12-17 03:55:00 Will TV install in safe mode / safe mode / networking?? Did you delete its entries in startup? Speedy Gonzales (78)
1249002 2011-12-17 04:18:00 I have found with a lot of these ones, if you start in safe mode and then immediately go to the%AllUsersProfile%

( C:\Documents and Settings\All Users for Windows 2000/XP )
( C:\ProgramData\ for Windows Vista/7 )

and simply change the name of the random generated named folder in there, then reboot - you can then clean up using whatever method you choose without being restricted by it.
bevy121 (117)
1249003 2011-12-17 04:56:00 Did you run Rkill from the site speedy linked ??? its very unusual if that doesn't kill those infections so other antimalware programs can then be run to clean them out. wainuitech (129)
1249004 2011-12-17 08:56:00 Gone as far as I can go.

All your help is appreciated, but now it's starting to throw up blue screen with error reports and shutting down.

SS must have a limit to the number of times it gets closed without responding to it's reporting.

Will have to get my pc retailer to look into it.

You folk have been great with past solutions and it's much appreciated.

Lurking.

Ps. still prefer Xp to this W7 machine of wifey's, lol.

P Ps. have the EQC money, so could go and get the replacement laptop.

lurks.
Lurking (218)
1 2