Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Unable to remove virus/malware

15 Jan 2014   #1
little Dom 12

Windows 7 Home premium 64 bit
 
 
Unable to remove virus/malware

After running a spybot scan it comes up with 2 infections but is unable to remove them, it shows they are in the registry, the ones it can't remove/ keep coming back are called:

SafeSaver.BHO
W3i.IQ5.fraud

Malware bites cannot detect them yet spybot is showing them as a severe threat can anyone help me remove them or link me to something that can


My System SpecsSystem Spec
.
15 Jan 2014   #2
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

I'm not entirely sure, but I think Spybot S&D isn't what it once was. I'd suggest checking with an alternative. Try the ESET on-line scanner - it is highly regarded.

Free Virus Scan | Online Virus Scanner from ESET
My System SpecsSystem Spec
15 Jan 2014   #3
cottonball

Windows 7 Home Premium
 
 

The ESET online scan is a good program. However, it is a rather lengthy process, and can be used after we zero-in on the location of the malware in question.

Please use the tool that follows to get to the target issues...

Zoek:
Download > Download zoek.exe version 5.0.0.0
Click: Download Zoek.exe version 5.0.0.0 (Do not click .zip or .rar)

When the download shows, and you get the option to save, please do so to the Desktop.
Right-click zoek.exe and select: Run as Administrator (Give it a few seconds to appear.)

If your AntiVirus warns you about the program, either allow Zoek to run, or temporarily disable your AV program.
Info on how to disable your security applications > How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides

Next, copy and then paste the entire script inside the code box below to the input field of Zoek:

Code:
createsrpoint; 
process; 
filesrcm; 
startupall; 
installedprogs;
installer-list; 
uninstall-list;
hijackthis; 
firefoxlook; 
chromelook;  
srinfo; 
DIR /S /A:L "%systemdrive%\*">>"%temp%\log.txt";b
Now...

Close any open windows.

Click the Run script button and wait. It takes a few minutes to run all the script.

When finished, the zoek-results.log is opened in Notepad.
If a reboot is needed the log is opened after the reboot.

The log is also found on the systemdrive, normally C:\

Please post the zoek-results.log in your reply.

Thanks.


.
My System SpecsSystem Spec
.

15 Jan 2014   #4
little Dom 12

Windows 7 Home premium 64 bit
 
 

Here you go:

https://www.dropbox.com/s/2uaqdfmhul...ek-results.log

I ran the eset scan earlier and it found 3 malware files but none were what spyware was detecting, i have since run a spyware scan and it found the virus/malware again
My System SpecsSystem Spec
15 Jan 2014   #5
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

ESET can take time, that's how it can root our some difficult infections, at times.

You can upload files directly, more convenient.
Screenshots and Files - Upload and Post in Seven Forums
My System SpecsSystem Spec
16 Jan 2014   #6
cottonball

Windows 7 Home Premium
 
 

No signs of SafeSaver.BHO or W3i.IQ5.fraud.

Everything looked for came up blank.

What version of Spybot do you have installed?
My System SpecsSystem Spec
17 Jan 2014   #7
little Dom 12

Windows 7 Home premium 64 bit
 
 

its version 2.1 (atleast thats what it says when i open it) guessing its a problem with spyware then if nothing else can find that particular virus
My System SpecsSystem Spec
17 Jan 2014   #8
cottonball

Windows 7 Home Premium
 
 

There is a later version of Spybot Search and Destroy.

Please update your program.

Start the Update through the Spybot tray icon (on the lower right of your Desktop by the clock).

Right-click the Spybot 2 tray icon and select: Update

Next, run a scan, and see if you still get these goodies:
SafeSaver.BHO
W3i.IQ5.fraud


When done, please obtain a Spybot report.

After the System Scan, select: Save scan log
Its on the navigation bar on the left.
Save to the Desktop, and provide in your reply.


Thanks!


.
My System SpecsSystem Spec
18 Jan 2014   #9
little Dom 12

Windows 7 Home premium 64 bit
 
 

Updated spybot to the latest version and run a scan and it reckons they are still there even after clicking fix and running a scan again

Scan Results.140118-0937.txt


My System SpecsSystem Spec
18 Jan 2014   #10
cottonball

Windows 7 Home Premium
 
 

Aha! Good job.

There is nothing better than knowing what, exactly, is causing the problem. It beats looking at a crystal ball!!

Please right-click Zoek.exe again, and select: Run as Administrator
Give the program a few seconds to appear.

Next, copy/paste the entire script inside the code box below to the input field of Zoek:
Do not copy the word 'code'.

Code:
W3i;u
SafeSaver;u
[-HKEY_LOCAL_MACHINE\SOFTWARE\Freeze.com];r
[-HKEY_LOCAL_MACHINE\SOFTWARE\SProtector];r
emptyalltemp;
emptyclsid;
Note: This script is written only for use on this computer. Please do not use it on another computer even if the problems are similar!

Now...

Close any open windows.

Click the Run script button and wait. It takes a few minutes to run the script.

When finished, the zoek-results.log is opened in Notepad.
If a reboot is needed the log is opened after the reboot.

Please post the new zoek-results.log in your reply.
My System SpecsSystem Spec
Reply

 Unable to remove virus/malware




Thread Tools






Similar help and support threads
Thread Forum
How do I remove this virus/malware url?
I tried programs and features and search, but came up empty. It constantly shows up in Firefox and Chrome ...
System Security
Suspected Malware or Virus
I am running Windows Premium 7 Home Edition and have the paid version of Kapersky installed and running. I have been trying to install Super Anti Spy to get an independent scan of my computer as I am having problems. Every time I try to download, I get the screen as shown in the attached. Can...
System Security
I have a virus and unable to run/download anti-virus software
Hi, This is my first time posting to the forum. I am not that knowledgeable with computers, but can follow basic instructions. My laptop is acting funny--I think I have a virus. However, I am unable to run any anti-malware or anti-virus software. I try to run McAfee and I get an error...
System Security
I'm not sure what is going on, virus, malware etc etc
OS: Windows 7 Ultimate 64 Ok So I thought I had a virus because my computer started running slow and programs started to not respond often. So I go to run my Avast, Malwarebytes, and AdAware and they are all turned off. So I said ok I'll just start in safe mode and run these. So each one found...
System Security
unable to remove malware? bug?
not sure how but ive picked up what i think is some malware. its an add-on tool bar called 'searchqu' and is by 'bandoo media inc' i noticed it in my toolbar and deactivated it but my computer was progressively slower than normal. i decided to look into it when i kept getting 'windows explorer...
System Security
Virus/Malware/Registry
What are the best current (FREE) Spyware,Registry and Virus software. When I took a break from my IT profession it was spybot and cc cleaner what is the top ones nowadays? Thanks
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 15:55.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App