Computer Hope
Software => Computer viruses and spyware => Topic started by: Gamer11705 on September 16, 2009, 09:41:32 PM
-
For some reason, I was browsing some websites, and then a huge attack of Spyware and Trojans hit me. Norton blocked a boat load of them, but I am positive one got through.
It's in my sidebar keep notifying me that I have a virus. I clicked the link it went to Advanced Virus Remover website where it wanted me to buy it. I did not of course, and found AVR09.EXE. I deleted it even in the Recycle Bin, but the notification is still there even after a restart. I had Norton do a full scan but whaddya know it found zilch. Does anyone know how to remove this very pesky and considered very DANGEROUS malware from my computer?
Tsk.. Stupid Norton.
-
Also when I try to run anything in my start menu, it tells me:
"Application cannot be executed. The file is infected. Please activate your antivirus software."
Son of bich, like I would really do that. I guess this virus was made for computer fools who click first and bring their computer back to Best Buy second
-
Also if this really helps, I got the name of the precise file I believe it is, by using the Date Modified to pinpoint the exact time I was attacked. It is called winupdate.
It is a Cookie Converter, but I am pretty sure it isn't. It's 43.9KB, and it was created the exact time I was attacked according to my Norton History Log.
I KNOW it has to be the malware messing with my computer, because it can't be deleted, saying I need permission to perform this action, which means that it is being used.
-
probaly the virus or malware may be deleted but the modification it creates in the registry is still there........
uninstall norton and use avast home edition and get ur pc scanned u will get rid of the virus or malware....
if u r pretty sure of u got rid of the virus then just try to update few things in the registry..........
be pretty sure to backup ur registry first......
Task manager can be disabled manually, but more commonly it's disabled by a virus. It's easy to re-enable once you're virus-free.
Click Start, then click Run, type in regedit, and click on OK.
Expand these registry keys in turn:
•HKEY_CURRENT_USER
•Software
•Microsoft
•Windows
•CurrentVersion
•Policies
•System
You should see something similar to this
[attachment deleted by admin]
-
Right Click on the DisableTaskMgr item:
and delete it u will get ur task manger back........
[attachment deleted by admin]
-
This son of a bish virus won't even let me run Regedit! WDF?!\
-
just try to run gpedit.msc.............
if u get it rply me...............
-
I don't think that's a file, it cannot be found on my Run. It's Windows Vista Prem btw.
-
Man this ticks me off for the last time. Norton is constantly failing me. It's up to date, I have the bloody expensive 360 version, and an extremely dangerous virus like this to slip by? Not slip by the cracks, something that won't even let my run those Windows files, didn't slip by the cracks, Norton was the gatesmen for letting it in.
-
Gamer11705
Ignore all posted advice so far.
follow the steps here:
http://www.computerhope.com/forum/index.php/topic,46313.0.html
and post the three logs.
A REAL malware expert will then be able to help you.
-
I really don't wish to sound like an impatient child (I really don't), but if I have complete verification on what the virus is, (I have even looked it up on the Internet), and where it is, is there just a way to manually launch my Task Manager so I can end the winupdate.exe file? Without use of a CMD, because this bloody virus seems to disable all Microsoft programs upon launch.
-
recovery console.
-
If my vague computer memory serves me right is that not only for XP?
-
If my vague computer memory serves me right is that not only for XP?
"recovery console" strictly speaking, yes.
but the command Prompt option in System Recovery Options when booting from the Vista DVD would allow you to delete the offending files.
On the other hand this is also likely to make your problem worse unless you can get every single malicious files in one swoop.
-
I'm trying out SUPERAntiSpyware. It said that it can remove this file, but at first I was unsure if it was good. But looking at that thread saying that even you guys reccomended it, well, I got it ASAP and it's running a scan now. *crosses fingers*
-
Oh sweet lord in heaven. It found it. Rebooting computer to take changes now. Whewww thanks for recommending SUPERAntiSpyware. I checked their website about winupdate.exe, and the possible sizes for the files, matched the exact size of my winupdate.exe. I hope this problem is resolved... :-\