Maximum PC

Ok, this is the virus I'm pretty sure my little sister has:

http://securityresponse.symantec.com/av ... .worm.html

Basically it doesn't let you open any windows task things like regedit, taskmanager, gpedit.msc, msconfig, etc. etc.

I have attempted the fix they list (safe-mode startup, run virus scanner in safemode) but AVG 6.0 will NOT run in safe mode. Is this normal? Will I have to have her buy NAV or something?

The virus is incredibly annoying especially since she is a complete dipshit and downloads all sorts of garbage from the net, so it's hard to eliminate this stuff with no access to regedit, task manager, gpedit, etc.

Anyone have any suggestions for me? muchas gracias de la cabra

Can you have her install the trial version of NAV and uninstall once the infection is cleaned?

there are trial versions of NAV and McAffe somewhere on the net.

i would start with those...


AVG doesnt run in safe mode? im supprized. they should update that

No need to run NAV. Just search for an online virus scanner. (i didnt see you mention anyhting about not having net access. Online virus scanners are good because they can still be run when viruses disable yours. I think trend micro has a good online AV. I googled and found this.

http://housecall.trendmicro.com/

Try giving this a shot if you can. Hope this helps.

JB

I can try... I was hoping I could get it done before I left CA for Tech again.

I was thinking about gettin one o'dems. Thanks

I think so too... it would run in windows normal boot, though, so it wasn't the virus

*shrug*

Thanks, I saw this one when I was googling for an answer, but I couldn't get it to run.

[quote="ShiftyEyedGoat"][quote="jbrock31"]No need to run NAV. Just search for an online virus scanner. (i didnt see you mention anyhting about not having net access. Online virus scanners are good because they can still be run when viruses disable yours. I think trend micro has a good online AV. I googled and found this.

http://housecall.trendmicro.com/

Try giving this a shot if you can. Hope this helps.

JB[/quote]

Thanks, I saw this one when I was googling for an answer, but I couldn't get it to run.[/quote]

This is because the way safe mode works is it only loads the required windows drivers to get the computer to boot. This is designed to prevent any startup programs that are causing problems on a system from running for troubleshooting purposes.

This is why no av program will run normally. If you can find one that will run from the command prompt and run in dos mode, it will run. I doubt you could get anything online to work because it does not run ActiveX or any other net technology in safe mode.

Does SARC's website give removal programs. You might try to see if there is a separate removal program available.

I really like the Panda Antivirus online scanner, it's found and fixed viruses for me that NAV and Mcafee could only quarantine at best.


Try this link

http://www.pandasoftware.com/activescan ... ncipal.htm

copy regedit to the desktop
rename it reg.exe and run it
go to the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
look for the it there (it will be something to do with microsoft (microsoft does not use this to start anything for the os))

reboot in to safe mode
and delete that little trickster

Go to this site with your sisters PC and run this software....it works!

http://housecall.trendmicro.com/

Also get Spybot and Ad Aware and run them after you update them. You can get them here:

http://www.majorgeeks.com/

On the left, click on spyware tools and you will find the above software there.
It works fine and everything I linked to is free

Nasty