Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Unable to remove virus/malware


15 Jan 2014   #1

Windows 7 Home premium 64 bit
 
 
Unable to remove virus/malware

After running a spybot scan it comes up with 2 infections but is unable to remove them, it shows they are in the registry, the ones it can't remove/ keep coming back are called:

SafeSaver.BHO
W3i.IQ5.fraud

Malware bites cannot detect them yet spybot is showing them as a severe threat can anyone help me remove them or link me to something that can


My System SpecsSystem Spec
.

15 Jan 2014   #2

Microsoft Community Contributor Award Recipient

Windows 7 Ult. x64 Windows 8.1 x64
 
 

I'm not entirely sure, but I think Spybot S&D isn't what it once was. I'd suggest checking with an alternative. Try the ESET on-line scanner - it is highly regarded.

Free Virus Scan | Online Virus Scanner from ESET
My System SpecsSystem Spec
15 Jan 2014   #3

Windows 7 Home Premium
 
 

The ESET online scan is a good program. However, it is a rather lengthy process, and can be used after we zero-in on the location of the malware in question.

Please use the tool that follows to get to the target issues...

Zoek:
Download > Download zoek.exe version 5.0.0.0
Click: Download Zoek.exe version 5.0.0.0 (Do not click .zip or .rar)

When the download shows, and you get the option to save, please do so to the Desktop.
Right-click zoek.exe and select: Run as Administrator (Give it a few seconds to appear.)

If your AntiVirus warns you about the program, either allow Zoek to run, or temporarily disable your AV program.
Info on how to disable your security applications > How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides

Next, copy and then paste the entire script inside the code box below to the input field of Zoek:

Code:
createsrpoint; 
process; 
filesrcm; 
startupall; 
installedprogs;
installer-list; 
uninstall-list;
hijackthis; 
firefoxlook; 
chromelook;  
srinfo; 
DIR /S /A:L "%systemdrive%\*">>"%temp%\log.txt";b
Now...

Close any open windows.

Click the Run script button and wait. It takes a few minutes to run all the script.

When finished, the zoek-results.log is opened in Notepad.
If a reboot is needed the log is opened after the reboot.

The log is also found on the systemdrive, normally C:\

Please post the zoek-results.log in your reply.

Thanks.


.
My System SpecsSystem Spec
.


15 Jan 2014   #4

Windows 7 Home premium 64 bit
 
 

Here you go:

https://www.dropbox.com/s/2uaqdfmhul...ek-results.log

I ran the eset scan earlier and it found 3 malware files but none were what spyware was detecting, i have since run a spyware scan and it found the virus/malware again
My System SpecsSystem Spec
15 Jan 2014   #5
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

ESET can take time, that's how it can root our some difficult infections, at times.

You can upload files directly, more convenient.
Screenshots and Files - Upload and Post in Seven Forums
My System SpecsSystem Spec
16 Jan 2014   #6

Windows 7 Home Premium
 
 

No signs of SafeSaver.BHO or W3i.IQ5.fraud.

Everything looked for came up blank.

What version of Spybot do you have installed?
My System SpecsSystem Spec
17 Jan 2014   #7

Windows 7 Home premium 64 bit
 
 

its version 2.1 (atleast thats what it says when i open it) guessing its a problem with spyware then if nothing else can find that particular virus
My System SpecsSystem Spec
17 Jan 2014   #8

Windows 7 Home Premium
 
 

There is a later version of Spybot Search and Destroy.

Please update your program.

Start the Update through the Spybot tray icon (on the lower right of your Desktop by the clock).

Right-click the Spybot 2 tray icon and select: Update

Next, run a scan, and see if you still get these goodies:
SafeSaver.BHO
W3i.IQ5.fraud


When done, please obtain a Spybot report.

After the System Scan, select: Save scan log
Its on the navigation bar on the left.
Save to the Desktop, and provide in your reply.


Thanks!


.
My System SpecsSystem Spec
18 Jan 2014   #9

Windows 7 Home premium 64 bit
 
 

Updated spybot to the latest version and run a scan and it reckons they are still there even after clicking fix and running a scan again

Scan Results.140118-0937.txt


My System SpecsSystem Spec
18 Jan 2014   #10

Windows 7 Home Premium
 
 

Aha! Good job.

There is nothing better than knowing what, exactly, is causing the problem. It beats looking at a crystal ball!!

Please right-click Zoek.exe again, and select: Run as Administrator
Give the program a few seconds to appear.

Next, copy/paste the entire script inside the code box below to the input field of Zoek:
Do not copy the word 'code'.

Code:
W3i;u
SafeSaver;u
[-HKEY_LOCAL_MACHINE\SOFTWARE\Freeze.com];r
[-HKEY_LOCAL_MACHINE\SOFTWARE\SProtector];r
emptyalltemp;
emptyclsid;
Note: This script is written only for use on this computer. Please do not use it on another computer even if the problems are similar!

Now...

Close any open windows.

Click the Run script button and wait. It takes a few minutes to run the script.

When finished, the zoek-results.log is opened in Notepad.
If a reboot is needed the log is opened after the reboot.

Please post the new zoek-results.log in your reply.
My System SpecsSystem Spec
Reply

 Unable to remove virus/malware




Thread Tools



Similar help and support threads for2: Unable to remove virus/malware
Thread Forum
I have a virus and unable to run/download anti-virus software System Security
Solved I'm not sure what is going on, virus, malware etc etc System Security
unable to remove malware? bug? System Security
Virus, Malware Removal System Security
virus, spyware, malware? System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:14 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33