lacking experience I have a tenatious virus and need help to remove it

You may not wish to help, I am a Linux user usually and only use Windows 7 as a backup when having problems in my Kubuntu Linux application.

I had a problem with my Linux Operating System and needed access to the Internet to make repairs. When I opened Windows 7, I was interrupted with an urgent message to upgrade Adobe Flash with security problems. That must have been a phony, because all of a sudden demands for installing products for correcting problems appeared on screen. There was no apparent method for removal, even the Windows removal tool did not work.

The virus kept me from using wordpad to type or copy and past information relating to the problem. I copied, long hand everything I could read. Those screens that identified the problem after running virus software and AdAware, had such a small font size, my ageing eyes could not read easily. Sometimes an address to a problem location for the virus would not fit the presenting window, and I was unable to view the entire address to the problem, so I am unable to give you an accurate report.

I have researched the problem to see if others are experiencing similar problems, but the effort has been unsuccessful. I removed all the offenders using the uninstall feature in the control panel. I use ClamWin for my virus software, its clone in Linux is called ClamAv, and it has always worked great in the past.

Keeping in mind that the font size was too small to comfortable read, I may be inaccurate in the following which I copied long hand:

C:\Windows\SysWOW64\\userinif.exe [Win.Trojan.12490497] FALSE POSSITIVE FOUND

C:\Windows\winsxs\x86microsoft-windows-userinit-3316f3856ad364a35.6.1.7601.17514_none_de.3024012ff2116\userinit.exe:[Win.Trojan 12790497]FALSE POSITIVE FOUND

C:\Windows\System32\drivers\1a7532da-31ad-48c5-8d60-be70ecfbab.93gw64.sys:Win.Adware.Swiftbrowse-497FOUND
Infected files 12

When I ran the virus software there was an enormous list of files or applications that contained a Warning: Can't open the C;\......listing a huge number of what appear to be system files where the files were denied opening by the virus software due to permission problems.

Another identified Trojan showed a partial address, but would not expand to show the whole address was:

C:\users\STEVEN\APPDATA\ROAM|... Trojan.VBS.UDE scan failed.

One time when I ws running virus protection, a thing called ProPCCleaner redirecte. It ran with a scan without permission.

The report said there were 171 System Related errors
414 com and ActiveX errors, 187 errors afecting personal, Profile 14.36B 860 junk file
1632 total errors....I couldn't make out the rest.

For over 20 years, I have not had a virus in Kubuntu Linux, and I do not have the experience to remove a virus.

Will someone try to help me, or tell me what I should do. I am such a dummy when it comes to using Windows 7. Thanks in advance for any help you may provide.

I made a stupid error. I was in my kubuntu Linux OS when I got your message. I immediately did what you said forgetting that I wasn't in the offending Operating System.

When last in Windows 7, the computer would NOT allow me to enter any browser anymore. I tried a movie application I use a bit, Netflix, and the computer would not allow me to open that program either.

Even though I can still open Windows 7, the fact that I collected mail on my Linux application, it no longer will download to my Thunderbird applidation in Windows. Unfortunately I won't be able to click on your link using Thunderbird. Whatever is going on has completely taken over the Windows OS.

I tried to open Windows in Safe Mode too, but pressing F8 prior to the Windows splash screen did not enter Safe Mode.

After opening Windows 7 Operating System, and still unable to open a Browser, I can't think of a way to access your recommendation. Can you think of anything else I can try?

I have been using Kubuntu for about 20 years, its like an old friend. Never had a virus or adware or spyware and didn't even install virus software until recently when my computer was acting funny. No virus though.

Since I use Windows so rarely, I don't recall having a virus attack before and do not have the experience that would have happened had I had a virus. Wow, I hear this happens from time to time in Windows. I have never experienced anything like it. Every logical path to removing it seems to be blocked including access to the Internet.

I am baffled though. What do they expect to gain. I can't believe anyone would purchase their virus removal recommendation after an experience like that.

Right now I am writing from my Linux application. It is pretty funny, because usually when I am having computer related problems, they are Linux, and when Linux goes down, you have to have access to the Internet. It is the very reason I installed Windows 7 in the first place, dual-boot configuration.

It seems strange that Kubuntu is my avenue to try and save my Windows 7 OS.

Can't think of what to do. I heard a rumor that it requires more contact with Microsoft if I want to reinstall my Windows 7 Operating System. If that is the case, I hope I am up to the task. Everything in the Linux system is Open Source. Since you can download any Linux application, make changes with it if you like, with the blessings of the creator, Accepting someone's ownership agreement is never part of the process. When I do anything with Microsoft products, I always just select Accept, because if I want what is offered, I am aware that is the only way I will get it. That always made me feel like I lost some freedom, but like all Windows users, it is the cost of doing business. I suspect that may be how the virus got into my computer, I just don't know.

I never surf any questionable sites that I know of; I can't even understand why my type of use of my computer would leave an opening or reason to damage my computer. It just doesn't make any sense.

If you have any further ideas please post your recommendations, I count you a friend and wish you well.

I hope this is not an impossible fix; I have come to rely on my Windows 7 application for times of emergency.

By the way, if you have never test drived a Linux Operating System, download Kubuntu 14.04 and take a test drive. First thing after installation open a terminal and type in sudo apt-get install updates and press Enter. Next enter the command sudo apt-get install upgrades. When that finishes, type in the command sudo apt-get install kubuntu-restricted-extras and press Enter. There are lots of things you can do still, but that will ready you for a test drive.

Then, just for kicks, select the Kmenu icon on the start panel and select 'System Settings'. It might be a little difficult to find, but if memory is right it will probably be among the first selections you find.

It is the configuration page. Anything that wasn't automatically installed and configured when you installed the system is there to configure. I suspect you will have a lot of fun, because the options are endless and Free to install too. If you try and enjoy it, I wish I could find a way to safely connect with you. I would be willing to coach you in the learning process to make what i am sure will tickle your taste buds, but takes a while to become comfortable with without a personal helper.

It would give me a way to return the kindness you are extending me. Of the few times I come to the Windows 7 forum, everyone is so helpful and kind to me. I want you to know that I appreciate it.:)

Jacee said:

Hi Shabakthanai, I'd like you to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   
   1. Click on to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the icon on your desktop.
   
   
4. Check
5. Click the button.
6. Accept any security warnings from your browser.
7. Check
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
11. Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the button.
13. Push

I was unable to for the following reasons.

When I read her reply, I was in the Kubuntu Linux Operating System reading from an application called Kmail. When I downloaded her reply from the server, the email no longer became available in the Thunderbird application of Windows 7, so I could not select it from her reply. I opened Thunderbird to check for new mail, it wasn't there.

Being unable to access a browser in Windows 7, I am unable to directly access their website while in the Windows 7 Operating System, and therefore unable to scan the potentially infected Operating System. Had I been able to select her link, I am pretty sure I could have gotten to the virus protection site. I can see it may be confusing, but I don't know how to explain myself better.

I really am not that smart when it comes to computers, and I don't see a way to achieve the scan. If I am missing something, please advise. I am willing to try anything to fix the system.

Thanks for the input, Layback Bear, there is probably something very simple I do not see.

Layback Bear said:

That is a lovely post but I do believe what Jacee needs to know is; did you or did you not complete her post#2 on your Widows 7 computer. Eset online scan.

Shabak,

Since you are a linux user, the thought process is you are familiar with the terminal prompts and such and would lead to thoughts of you being more tech savvy than most. Next time, I suggest you lead with that fact that you are a novice user from the get go. Also, I recommend not recommending other operating systems in a Windows 7 forum.

Consider using a phone camera to capture text you cannot copy and paste. As well, you can print your emails or these instructions to perform the activities required of you.

Lastly, if you really are a Linux user, consider having TWO installations of linux instead of a linux/windows setup. You can dual install Kubuntu and Xubuntu side by side. I'm not sure why you need windows to access the internet when you have Linux unless you are playing around with system setup in which case, I recommend you look into Virtualbox environments to help you resolve issues. (This is a recommendation, not a fact. Take it with a grain of salt)

----------------------

If you cannot get Windows to run in Safe mode, perform this method till you get what you need:

Open the START menu and search and run "msconfig" without the quotes.
It should open a new window that should have a BOOT tab.
Check ON the SAFE BOOT option and enable the NETWORK option of it (something similar to this)


Once you click OK, it should ask you if you want to reboot. These instructions can also be found by googling them should you need pictorial representations. This will KEEP WINDOWS in SAFE MODE everytime you reboot, so make sure you return it back to normal by UNCHECKING SAFE BOOT mode when finished.

----------------------

Now you can go to this website Free Virus Scan | Online Virus Scanner from ESET to perform STEP 1 of Jacee's instructions. Once in that website, follow the rest of her instructions as stated above.

This should lead you to a more fruitful path of resolving your trojan/virus issue.

aaa

Jacee said:

Trinity Rescue Kit may help your computer. Please read .. Trinity Rescue Kit | CPR for your computer

I failed to mention in my previous reply, that I also was unable to print anything. My hands sometimes shake a bit when I am writing; I am unable to focus sometimes too. Much of the print was too small to read; I had to guess a lot. The fine print seemed to be attached to descriptions of error messages and data provided by the virus software. I assumed it was just a very sophisticated virus, designed to trap you and any possibility to overcome what they have done. Hopefully I did not miss response to anything else you took the time to mention. I am doing something on the other system while answering this post, so until I can open Windows 7, I won't be able to attempt your current recommendations. Thanks again.

aaa

Trinity Rescue Kit or TRK is a free live Linux distribution that aims specifically at recovery and repair operations on Windows machines, but is equally usable for Linux recovery issues. Since version 3.4 it has an easy to use scrollable text menu that allows anyone who masters a keyboard and some English to perform maintenance and repair on a computer, ranging from password resetting over disk cleanup to virus scanning