Unable to remove virus/malware

Page 1 of 2 12 LastLast

  1. Posts : 15
    Windows 7 Home premium 64 bit
       #1

    Unable to remove virus/malware


    After running a spybot scan it comes up with 2 infections but is unable to remove them, it shows they are in the registry, the ones it can't remove/ keep coming back are called:

    SafeSaver.BHO
    W3i.IQ5.fraud

    Malware bites cannot detect them yet spybot is showing them as a severe threat can anyone help me remove them or link me to something that can
      My Computer


  2. Posts : 19,383
    Windows 10 Pro x64 ; Xubuntu x64
       #2

    I'm not entirely sure, but I think Spybot S&D isn't what it once was. I'd suggest checking with an alternative. Try the ESET on-line scanner - it is highly regarded.

    Free Virus Scan | Online Virus Scanner from ESET
      My Computer


  3. Posts : 2,470
    Windows 7 Home Premium
       #3

    The ESET online scan is a good program. However, it is a rather lengthy process, and can be used after we zero-in on the location of the malware in question.

    Please use the tool that follows to get to the target issues...

    Zoek:
    Download > Download zoek.exe version 5.0.0.0
    Click: Download Zoek.exe version 5.0.0.0 (Do not click .zip or .rar)

    When the download shows, and you get the option to save, please do so to the Desktop.
    Right-click zoek.exe and select: Run as Administrator (Give it a few seconds to appear.)

    If your AntiVirus warns you about the program, either allow Zoek to run, or temporarily disable your AV program.
    Info on how to disable your security applications > How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides

    Next, copy and then paste the entire script inside the code box below to the input field of Zoek:

    Code:
    createsrpoint; 
    process; 
    filesrcm; 
    startupall; 
    installedprogs;
    installer-list; 
    uninstall-list;
    hijackthis; 
    firefoxlook; 
    chromelook;  
    srinfo; 
    DIR /S /A:L "%systemdrive%\*">>"%temp%\log.txt";b
    Now...

    Close any open windows.

    Click the Run script button and wait. It takes a few minutes to run all the script.

    When finished, the zoek-results.log is opened in Notepad.
    If a reboot is needed the log is opened after the reboot.

    The log is also found on the systemdrive, normally C:\

    Please post the zoek-results.log in your reply.

    Thanks.


    .
      My Computer


  4. Posts : 15
    Windows 7 Home premium 64 bit
    Thread Starter
       #4

    Here you go:

    https://www.dropbox.com/s/2uaqdfmhul...ek-results.log

    I ran the eset scan earlier and it found 3 malware files but none were what spyware was detecting, i have since run a spyware scan and it found the virus/malware again
      My Computer


  5. Posts : 24,479
    Windows 7 Ultimate X64 SP1
       #5

    ESET can take time, that's how it can root our some difficult infections, at times.

    You can upload files directly, more convenient.
    Screenshots and Files - Upload and Post in Seven Forums
      My Computer


  6. Posts : 2,470
    Windows 7 Home Premium
       #6

    No signs of SafeSaver.BHO or W3i.IQ5.fraud.

    Everything looked for came up blank.

    What version of Spybot do you have installed?
      My Computer


  7. Posts : 15
    Windows 7 Home premium 64 bit
    Thread Starter
       #7

    its version 2.1 (atleast thats what it says when i open it) guessing its a problem with spyware then if nothing else can find that particular virus
      My Computer


  8. Posts : 2,470
    Windows 7 Home Premium
       #8

    There is a later version of Spybot Search and Destroy.

    Please update your program.

    Start the Update through the Spybot tray icon (on the lower right of your Desktop by the clock).

    Right-click the Spybot 2 tray icon and select: Update

    Next, run a scan, and see if you still get these goodies:
    SafeSaver.BHO
    W3i.IQ5.fraud


    When done, please obtain a Spybot report.

    After the System Scan, select: Save scan log
    Its on the navigation bar on the left.
    Save to the Desktop, and provide in your reply.


    Thanks!


    .
      My Computer


  9. Posts : 15
    Windows 7 Home premium 64 bit
    Thread Starter
       #9

    Updated spybot to the latest version and run a scan and it reckons they are still there even after clicking fix and running a scan again

    Scan Results.140118-0937.txt
      My Computer


  10. Posts : 2,470
    Windows 7 Home Premium
       #10

    Aha! Good job.

    There is nothing better than knowing what, exactly, is causing the problem. It beats looking at a crystal ball!!

    Please right-click Zoek.exe again, and select: Run as Administrator
    Give the program a few seconds to appear.

    Next, copy/paste the entire script inside the code box below to the input field of Zoek:
    Do not copy the word 'code'.

    Code:
    W3i;u
    SafeSaver;u
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Freeze.com];r
    [-HKEY_LOCAL_MACHINE\SOFTWARE\SProtector];r
    emptyalltemp;
    emptyclsid;
    Note: This script is written only for use on this computer. Please do not use it on another computer even if the problems are similar!

    Now...

    Close any open windows.

    Click the Run script button and wait. It takes a few minutes to run the script.

    When finished, the zoek-results.log is opened in Notepad.
    If a reboot is needed the log is opened after the reboot.

    Please post the new zoek-results.log in your reply.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:02.
Find Us