Mazda Rotary Club

General => Rotary and General Chit-Chat => Topic started by: Skifledanabit on January 30, 2012, 04:08:55 PM

Title: Any computer guys around?
Post by: Skifledanabit on January 30, 2012, 04:08:55 PM
My work PC has managed to contest the abnow virus, anti malware won\'t get rid of it and it\'s blocking any attempt at downloading AVG, I\'m running XP.

Got any ideas how to get rid of it, short of wiping the computer?
Title: Any computer guys around?
Post by: B.Martin on January 30, 2012, 04:13:03 PM
You could stop looking at porn on dodgy sites :Giggle
Title: Any computer guys around?
Post by: Casey on January 30, 2012, 04:16:40 PM
Try downloading "malwarebytes" and running that. Really good at dealing with most problems.

LINK HERE (http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button)

Download the free version and decline the "pro" trial wehn asked. The free version is fine.

Run a FULL scan.
Title: Any computer guys around?
Post by: Casey on January 30, 2012, 04:18:17 PM
Some infections will stop you downlaoding it, in which case you may have to download on another PC and use a USB stick to transfer/install.
Title: Any computer guys around?
Post by: Casey on January 30, 2012, 04:19:38 PM
If you get really stuck, I\'ve got a bit of time in the next hour or so and might be able to remote into your PC to take a look.

PM me and I\'ll send you my phone number if you want to give that a try.
Title: Any computer guys around?
Post by: Prof on January 30, 2012, 04:27:39 PM
check your windows\\sytem32\\etc\\hosts file - a lot of malware and viruses nobble the hosts file and create entries for all the major AntiVirus players by spoofing the address back to the local loop back address 127.0.0.1 - this stosp the AntiVirus software from updating itself.
 
A lot of companies have free downloadable removal tools for specific viruses - check their websites from a clean computer and see what you can find.  I know that AVG does a bootable CD running Linux which can clear some infected Windows machines without running Windows - can be handy to stop it spreading.
Title: Any computer guys around?
Post by: Skifledanabit on January 30, 2012, 04:28:29 PM
I\'ve tried malwarebytes, no luck, sorry Casey, I\'m out of the office now, gave up. I\'ll see what one of my IT mates says.
Title: Any computer guys around?
Post by: ChrisDubbya on January 30, 2012, 04:31:28 PM
If you can\'t install anything try downloading this -Microsoft Security Scanner (http://www.microsoft.com/security/scanner/en-gb/default.aspx)

even on another machine and running from a USB should do the trick, it\'s completely standalone so most virus\'/malware can\'t stop it,  I\'ve used it quite succesfully on heavily infected machines that can\'t even open a browser or run anything from the start menu left it going for a few hours and job done!
Title: Any computer guys around?
Post by: m1tch on January 30, 2012, 04:35:14 PM
Could you not try and get in via safemode (usually tapping F8 when it boots) which should bypass the operating system?
Title: Any computer guys around?
Post by: K7RXX on January 30, 2012, 05:07:18 PM
Good points above. Another simple option is to try and restore your system to a previous date if you have any saved. Has worked for me on a few occasions.
START > PROGRAMS > ACCESSORIES > SYSTEM TOOLS > SYSTEM RESTORE.
Some Viruses prevent you from doing this and remove the option from start menu all together. Worth a try.
I run a script that creates a new restore point every time I start the computer for such an occasion GL
Title: Any computer guys around?
Post by: Skifledanabit on January 31, 2012, 03:09:16 AM
Tried system restore, no luck, I\'ll try the options posted, the registry keys etc I wouldn\'t have a clue as I don\'t know what\'s supposed to be there or not.
Title: Any computer guys around?
Post by: Casey on January 31, 2012, 09:50:37 AM
All the advice above is good stuff

I\'m going to be out all day, but this is looking like a situation where I would physically remove the hard drive, strap it into a fully protected PC (or connect via a USB adapter) and scan the drive without it being active with AVG, MWbytes, Superantispyware.

I don\'t think it\'s going to be easy fixing this whilst the drive and software on it is "active".

Another way to tackle it is to create a "UBCD" (Ultimate Boot CD), which is a WinXP system and tools on a bootable CD. This creates an environment where the hard drive does not boot and you can work on it from the CD installed OS. However, you\'ll need another PC and some PC knowledge to create the CD and use the tools it contains.

UBCD (http://www.ubcd4win.com/)

As mentioned above, I\'ve also used the AVG bootable "rescue disk" suggested above with success in some circumstances. Might be worth a go but, again, requires another PC to create the disk.

AVG CD (http://www.avg.com/gb-en/avg-rescue-cd)