Please help.My Win7 infected....

[titi2]

Please help. My Win7 was infected with a virus. What should I do, please?
I already boot it up in safemode to restore the computer to an earlier time. It doesn't help.

The computer didn't come with the CD so I couldn't boot it up with the CD to either clean install or fix it. Is it too late to make a Restore disc? If a Restore disc has to be made, please show me how to back it up?

Thanks for your help.

 

[karlsnooks]

run MalwareBytes. Link is in my sig.

 

[t-4-2]

Please help. My Win7 was infected with a virus. What should I do, please?
I already boot it up in safemode to restore the computer to an earlier time. It doesn't help.

The computer didn't come with the CD so I couldn't boot it up with the CD to either clean install or fix it. Is it too late to make a Restore disc? If a Restore disc has to be made, please show me how to back it up?

Thanks for your help.

If your computer is infected as you said, why weren't you running your anti-virus ( AV ) program ?
Do you have an AV installed at all ? Yes or no ?
If you do, run it NOW.
If you don't have any, and it sounds like you don't, please do this ......

First, install Malwarebytes and run it :
Malwarebytes : Malwarebytes Anti-Malware is a free download that removes viruses and malware from your computer
(Pick the free version).
After you have run it, please post back the result.

Secondly, and I am assuming that you do NOT have an AV installed.....
Download and install Microsoft Security Essentials.This will be your anti-virus protection program from now on.
Virus, Spyware & Malware Protection | Microsoft Security Essentials

 

[titi2]

Thanks for your help. I accidentally downloaded Win7 Security 2012 or something like that. Now every time I start Win7, there's a pop-up window saying that my computer has been infected. Looks like it's a fake program. Yes, I have Avast on my computer. How can I run Malwarebytes on my infected computer. How can I clean it? Thank you.

 

[karlsnooks]

malwarebytes Link in my sig.

Run a FULL scan.

 

[t-4-2]

Thanks for your help. I accidentally downloaded Win7 Security 2012 or something like that. Now every time I start Win7, there's a pop-up window saying that my computer has been infected. Looks like it's a fake program. Yes, I have Avast on my computer. How can I run Malwarebytes on my infected computer. How can I clean it? Thank you.

You were given download links by 2 persons.
Take your pick.
Note : after you have installed Malwarebytes, open it> click Update > after it finishes updating, click Scanner > click "Perform full scan"> sit back and wait>when finished, it will give you a report.

If the rogue program prevents you from downloading in normal mode, try it in Safe Mode with Network.
If still it won't let you,then you will need to find a friend with a computer, burn the Malwarebytes to a flash drive or CD> take it home and run it in Safe Mode.

 

[gregrocker]

It's possible the fake AV virus will block you from running programs which can kill its infection.

If this is the case, download this and burn to CD or write to USB flash stick, boot it and run a scan from the boot mode where the virus cannot operate and is a sitting duck:
Microsoft Standalone System Sweeper
How to Boot your Computer from a Bootable CD or DVD


Let us know if this works as we have other measures to take to kill the infection so a program like Malwarebytes can run if it is blocked.

 

[titi2]

Thank you all for your help. Much appreciated.

 

[karlsnooks]

Let us know when MalwareBytes finishes and what MalwareBytes found.

 

[Corrine]

Thanks for your help. I accidentally downloaded Win7 Security 2012 or something like that. Now every time I start Win7, there's a pop-up window saying that my computer has been infected. Looks like it's a fake program. Yes, I have Avast on my computer. How can I run Malwarebytes on my infected computer. How can I clean it? Thank you.

Hi, titi2. Please see the specialized instructions at Bleeping Computer for removing this rogue. Remove Win 7 Antispyware 2012 and Vista Antivirus 2012 name changing rogue (Uninstall Guide).

 

[gregrocker]

The steps Corrine posted above have worked for me just recently on that infection.

You'll need to use the RKill regedit to unblock processes to run Malwarebytes.

 

[YTBOY83]

Use CCleaner, msconfig, or a program what shows you Start up process's, see what new Start Up process's have appeared and disable them, then restart your PC, then run malwarebytes. You can also find the directory (location) of a dodgy Start Up Process and then google it and delete, or if you know it should not be there then delete, or use the program they have suggested here RKill

 

[karlsnooks]

Let us know the result of following Corrine's advice.

 

[Corrine]

@rmw020, that won't help if the instructions I linked previously aren't followed.

 

[titi2]

karlsnooks: Thank you for your help and support!The Malwarebytes found nothing, unfortunately.

corrine: Thanks Corrine. I've been reading the article. Truly appreciated.

Folks, Could you please tell me how to get to this place (forum) except clicking on the thread in my email. I went back to Sevenforums but couldn't find Windows 7 Forums > Windows 7 help and support > System Security
My thread was moved. I'm afraid I might have violated the Forum's rules so the Admin/Mod moved my thread. Cheers.

Senior Member


​

 

[gregrocker]

Were you able to run Malwarebytes from the Desktop or was it necessary to run it in Safe Mode?

Run it again to make sure it finds nothing. What are the symptoms you're still experiencing?

Next download and burn to CD or write to flash stick http://www.sevenforums.com/tutorials/166445-microsoft-standalone-system-sweeper.html, boot it to run a full scan.

 

[karlsnooks]

titi2,

Definitely run the Microsoft Standalone System Sweeper.

This is a malware, virus remover that you boot from. It sweeps your computer clean without you having to boot to your computer. This allows easy removal of some of the bad guys who are counting on your booting to your hard drive.

Run the FULL SCAN which will take several hours depending upon the size of your hard drive. But the full scan is just that. It will scan every byte on your drive. Malware that has hidden itself in inconspicuous places will be found.

 

[karlsnooks]

titi2,

I strongly recommend running the System Sweeper from a USB stick.

Why, because the virus/malware database is updated very frequently, sometimes even several times a day. In other words, it is possible that the CD you burn is out of date 2 hour later and you are stuck with trying to update a CD.

I'm going to include a writeup which is the way I keep the System Sweeper up to date. This procedure works. This procedure varies a little from the standard approach, although the Microsoft documentation does discuss the method I use.

PUT SYSTEM SWEEPER ON A USB STICK


System Sweeper, https://connect.microsoft.com/systemsweeper, allows you to start an infected PC and perform an offline scan to identify and remove viruses, rootkits and other advanced malware. System Sweeper is a free standalone, bootable malware and virus remover from Microsoft.

Safety Scanner, Microsoft Safety Scanner - Remove Spyware, Malware, Viruses Free, is free, downloadable, provides on-demand scanning and helps remove viruses, spyware, and other malicious software. It works with your existing antivirus software.

If the target computer has a working internet connection, then you may prefer to use the Safety Scanner.


Download System Sweeper (about 576 kB):
https://connect.microsoft.com/systemsweeper

Insert 256 MB or larger USB stick into a usb port.

Run the downloaded program--mssstool64.exe or mssstool32.exe

Choose the option to install to USB.
Caution: The install program will format the usb stick.

The install program will download about 200 mB more.

After the install is finished, leave the stick in the usb slot.

Run the program you downloaded once again.

This 2nd run, and any subsequent runs, will download the very latest anti-virus definitions (about 60 mB).

To keep System Sweeper up-to-date, simply reinsert the usb stick and run the installation program again.

The initial, full scan by System Sweeper can easily take a couple of hours, but subsequent quick scans will take only a few minutes.

Remember, your computer is being very thoroughly checked for all types of malware.



==================================

 

[titi2]

karlsnooks, and Corrine,

In between Steps of installing 3 different programs, do I, at any time, RESTART the computer? Thanks for your help

 

[gregrocker]

You didn't ask me, but since they are away: what 3 programs are you referring to?

The Standalone Sweeper I suggested?

I also asked you some questions which need answering so we can help you better:

Were you able to run Malwarebytes from the Desktop or was it necessary to run it in Safe Mode?

Run it again to make sure it finds nothing. What are the symptoms you're still experiencing?

Next download and burn to CD or write to flash stick http://www.sevenforums.com/tutorials/166445-microsoft-standalone-system-sweeper.html, boot it to run a full scan.