Forum Home
Press F1
 
Thread ID: 97556 2009-02-19 22:32:00 Virus Removal Help Blam (54) Press F1
Post ID Timestamp Content User
749444 2009-02-20 05:13:00 Eh...thanks for the advice shell49 but it sucks....and I'm not a n00b:p

BTW I tried to install Nod and do a scan, but when trying to logon on a message popped up and the computer logged off itself:

Windows Software Protection:
"An unauthorized change was made to windows."

"Windows has discovered a change that will result in limited Windows functionality. Use the link below to find out how to fix windows."

So I tried safe mode and luckily it worked.
But when I tried to install nod, It said "Access Denied Error 5"
Ran as administrator, but still didn't work.

I've removed ALOT of viruses and malware throughout my life, but this one is VERY effective and is pretty hard to remove....

My next option will be to connect the drive to a PC for a scan....

Blam
Blam (54)
749445 2009-02-20 05:33:00 By the looks of it, that error means it or something isnt compatible with Vista

I dont think a virus is causing it

What version of Vista is it? Is it 32 or64 bit?
Speedy Gonzales (78)
749446 2009-02-20 06:02:00 32bit Vista Business Blam (54)
749447 2009-02-20 06:15:00 It should be compatible with Vista ( It doesnt say with what versions though)

I would check the Eset / NOD forum, or send Eset / Chillisoft (which is in NZ), an email.

Theyre up Dominion Road actually. And see what they say
Speedy Gonzales (78)
749448 2009-02-20 06:19:00 I use nod32 on my home pc with vista ultimate and it works fine.
I think this is the virus causing damage...
Blam (54)
749449 2009-02-20 06:38:00 Is bkha.exe on this system as well? Speedy Gonzales (78)
749450 2009-02-20 06:53:00 It was originally-but I deleted it and its seemed to have gone...
This virus is hidden incredibly well...
Blam (54)
749451 2009-02-20 06:58:00 Hmm that first file is related to it.. Looks like its cloaked malware.

Maybe a rootkit

Get this unzip it then run it (www.gmer.net)

And catchme then run it (www.gmer.net)

Info about it is here (www.gmer.net)
Speedy Gonzales (78)
749452 2009-02-20 07:54:00 Ran Catchme, and it detected something, but when I tried to from gmer it said "gmer has stopped working" restarting, etc.

May be because I'm doing this from safe mode, as I cannot access windows otherwise
Blam (54)
749453 2009-02-20 08:00:00 Did you disable system restore?

Try renaming gmer.exe to something else (ie: test.exe) . Then try again

As it looks like some rootkits (or whatever) can stop this program from working

Also, according to the gmer site, DONT click on show all while its scanning
Speedy Gonzales (78)
1 2 3 4 5 6