How do I remove this virus that gives me pop up virus alerts? I did a scan and thought I deleted the problem, but it’s still here!! It won’t let me open programs and keeps opening my IE and going to this site: http://antivirvip.com/shop?abc=cGdpZD0xMyZyPTk0LjA=
I went through a looooong boot time scan and clicked on #1 for delete something infecting HP/BIN/endprocess or whatever. Should I have deleted or “moved to chest”??? I remember it mentioned win32/kill … so sorry, I’m very inexperienced at removing these things.
Thank you very much. I wish I knew how I got this!!!
Hi.
Download RKill to your desktop from the following link.http://www.bleepingcomputer.com/download/anti-virus/rkill
When at the download page, click on the Download Now button labeled iExplore.exe download link.
Start >> Run ( (or Windows button + R )
%UserProfile%\desktop
Enter
You should now see a window that shows all of your desktop icons, including the iExplore.exe program. Now double-click on the iExplore.exe icon.
Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that RKill is an infection, do not be concerned. This message is just a fake warning
—>http://www.malwarebytes.org/
When the file has finished downloading, look on your desktop for mbam-setup.exe and right-click on it and select Rename. Change the name of the program to Explorer.exe .
After you rename the mbam-setup.exe to Explorer.exe install Malwarebytes.
→ Attach here Malwarebytes logs and tell me if there is improvement
============
Then run DDS tool
Download DDS and save it to your Desktop from here:http://download.bleepingcomputer.com/sUBs/dds.scr
Double click dds.scr to run the tool.
* When done, DDS will open two (2) logs:
1. DDS.txt
2. Attach.txt
Save both reports to your desktop. Attach DDS.txt back to topic.
Hi… Malwarebytes is asking me if I want to do a quick scan, full scan or flash scan. Which do I choose?
Thank you so much for your help.
There was an improvement after the first step! The log you requested:
Malwarebytes’ Anti-Malware 1.50.1.1100www.malwarebytes.org
Database version: 6373
Windows 6.0.6001 Service Pack 1
4/16/2011 1:42:46 AM
Scan type: Quick scan
Memory Processes Infected: 0
Memory Processes Infected:
Memory Modules Infected:
Registry Keys Infected:
Registry Values Infected:
Registry Data Items Infected:
Folders Infected:
Files Infected:
The DDS text is too long to post… what should I do? Divide it up?
DDS (Ver_11-03-05.01) - NTFSx86Enabled/Updated {C37D8F93-0602-E43C-40AA-47DAD597F308}Enabled/Updated {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}Enabled/Updated {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}Disabled/Updated {61CDFD9D-3CAC-9270-C6FC-52325ACB795B}Enabled {FB460EB6-4C6D-E564-6BF5-EEEF2B44B473}
printing\hpswp_printenhancer.dll
files\adobe\acrobat\activex\AcroIEHelper.dll
explorer\skypeieplugin.dll
explorer\skypeieplugin.dll
printing\hpswp_BHO.dll
hxxp://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_4/PhotoCenter_ActiveX_Control.cab
hxxp://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_5/PhotoCenter_ActiveX_Control.cab
3208198ce6fd}
ABCDEFFEDCBA}
ABCDEFFEDCBA}
presentation foundation\DotNetAssistantExtension
08825760534b}moveplayer@movenetworks.com - c:\users\coto\appdata\roaming\Move Networks
6912d1c11d89}\mpengine.dll
I hope I did what you needed from me, but I have to go. I’ll check back in the morning.
Thank you very much for your help. What a RELIEF!!!
Pondus
April 16, 2011, 12:27pm
10
big files can be attached… Lower left corner > additional options > attach
I see you have ad-aware installed, this has a integrated Ikarus virus engine, it may conflict with avast so i would uninstall it
system
April 16, 2011, 8:44pm
11
I had the same problem as this post and followed the instructions but i’m lost @ this point. * When done, DDS will open two (2) logs:
Save both reports to your desktop. Attach DDS.txt back to topic
Can someone explain? i’m unable to get online on my account due to no JavaScript message
So did following those steps help? Did you download the DDS and run it? If so, it should’ve scanned your computer and then generated those two reports which you should “save as” to your desktop then attach the DDS.text to your reply as an attachment. I guess the report is to show the support what the problem was, not sure.
big files can be attached… Lower left corner > additional options > attach
I see you have ad-aware installed, this has a integrated Ikarus virus engine, it may conflict with avast so i would uninstall it
Haha, I thought of the same thing so I wondered if I should uninstall. So after reading your post, I did go and uninstall LOL Of course I did NOT have the adaware on when I got the trojan/virus.
Sorry about waiting…
Download ComboFix from here Desktop .this guide note: ComboFix must be downloaded to your Desktop .
Temporarily disable your AntiVirus program.this Instruction.
Run ComboFix .Yes if prompted to download.DISCLAIMER OF WARRANTY ON SOFTWARE .Yes to allow ComboFix to continue.Recovery Console is not installed, ComboFix will offer download & installation.Yes to allow ComboFix to install Recovery Console .
When the tool is finished, it will produce a log report for you. (typical location: C:[b]ComboFix.txt[/b] )Attach log reports ( ComboFix.txt) back to topic.
