Help with virus.. Pc restart

S

SlyFly

Expert Member
Joined
Aug 5, 2007
Messages
2,172
Reaction score
1
Ok im typing this on a k810i so please bare with me..

Ok so yesterday i decided to switch from avg tot avast anti virus on system restart i have ANOTHER antivirus installed, antivirus xp 2008, that ketp reporting that i have over a 1000, on inspection, google, i discover its infact a virus/malware..

So i tried to uninstall it etc, avast went crazy and now when i enter windows avast says virus detected etc. And then pc would auto restart. So i uninstalled avast and it stil does it..

So something that loads up at boot has gone wrong, and it restarts.. Safe mode is fine, but I cant/dont know what to do? Ive deleted some files asociated with the virus but no luck..

Anyway to stop programs running at startup? Almost like safe mode.. Im stuck!

Getting info on this is hard with Opera Mini!

Thanks
 
So you've been caught with XPAntivirus2008 :(

I could only get rid of it by FORMAT C: Not even HijackThis could help me.
 
ok try this

1)safemode - msconfig - disable all startup items
2)disable system restore
3)install avast - schedule boot time scan.
4)reboot - boot scan with avast.
5)boot into normal mode - observe
6)get spybot S&d 1.6 from another pc/source than this pc. - install,scan,clean
7)get ccleaner +run
8)report back :)
 
Ai tog.. Drive is partioned and it seems only windows part is fked.. So I can backup in safe mode, but I dont have my windows cd with me.. So im looking at alternatives!
 
there is a dedicated fix for this nasty ....... just google 'Antivirus 2008 + removal' ;)

Good luck bru :o
 
Ai tog.. Drive is partioned and it seems only windows part is fked.. So I can backup in safe mode, but I dont have my windows cd with me.. So im looking at alternatives!

Ive done avast boot scan.. And getting other files/program is going to be hard..
 
How to get rid of XP Antivirus 2008.

Boot into safe mode.
Install CCleaner found at http://www.ccleaner.com
Use CCleaner to disable anything related to XP Antivirus in startup
Try and remove any component of XP Antivirus 2008 by uninstalling it. It lies like crap, but just do it. The idea counts.
Forcibly remove it with CCleaner if need be.
Install AVAST if possible. If not boot back into normal Windows and do it there. Use CCleaner to kill any instanced of XP antivir 2008 that went back into startup and schedule scan at startup with AVAST. Now reboot and KILL THAT SUCKER!!!

:)
 
SlyFly said:
Ai tog.. Drive is partioned and it seems only windows part is fked.. So I can backup in safe mode, but I dont have my windows cd with me.. So im looking at alternatives!
Click to expand...

If it starts in safe mode the windows core is fine.

Is it starting up correctly in safe mode and did you then follow the msconfig route described?
 
Wow..
This is just getting better and better. Pc was of and now when I tried to start pc to try some of the advice.. The screen doest go on, dvdrom goes on and of and pc makes a beep sound..

So now i cant even get into safe mode.. Maybe i should just throw it out the window..
 
Ok.. Think ive got some progress.. Removed mobo battery, got into safe mode, disabled al startup programs loaded into normal windows without restarting.. Now to get this kark of my pc.. Next post hopefully from my pc..
 
Wow spoke to soon.. Seems with the process of removing battery i unplugged network cable.. So when i plugged it in to connect it restarted again.. Plug it out works! Luckily i have avast install on my pc.. So instaling that now and see if i can remove it with just that.. Also have avg spyware but its outdated.. So il see if that can help.. Anymore tips?
 
Ok.. Stuck again.. 2 seconds after plugging in my network cable my pc restarts even after scanning, etc? Avast aint getting the virus or problem..
Im able to connect with pc via my phone, just discovered... So sending this with pc :/

But Avast goes crazy, so obviously the virus is trying to send info or something via the connection...

Next thing I know my phone will be fked :(
 
Last edited:
PsyWulf said:
Win32 PE CIH

Activates randomly on the 27th of a month. Physically damages the BIOS chip

man I hated that thing
Click to expand...

Chernobyl. That thing wiped out my old high school's network 9 years ago, though luckily it didn't damage the hardware. Also, Windows 95 and 98 were terribly vulnerable to that. Shudder to remember those days :sick:

@ SlyFly

In a case like this, I often find it best to format and start from scratch. Although Windows isn't fatally wounded yet, it's close. I did a repair for someone, and even after a through Avast scan, SpyBot scan and others, the system was still broken by the aftermath of the virii and trojans. Windows worked, but half the things like unhiding folders didn't.

If you go the long route, install Avast, and then perhaps Comodo Firewall. That program brings lots of pop ups but it keeps your pc safe if you pay attention.
 
Ok guys, got connected with PC via my network etc.

So its looking good... I went to system restore and unclicked Restart on error (Or whatever)

Installed Spyware Docter via my cellphone (Thats going to be another R50 on my bill) scanned got a 4 high risk threats and a few hundred low/medium.

Then I ran CC Cleaner and cleaned out registry etc.

Restarted plugged in cable and its working... Okay not restarting ;) Avast just jumped and told me it detected a virus in 2 files:
* One in my temp folder (Was previously also there, if I delete it, it just comes back)
* blphc52rj0eg8e.scr

So its still around here on the pc, but I think that Avast and Spyware will keep it under control until I can get to my windows cd and do a format...

While I was connected with my phone, Avast kept scanning outgoing emails... So obviously I also had more than one spyware maybe. Saw some of the titels of the emails and its those typical spam emails, get ur dick into a prick kind of thing...

Also the funny thing is that some or other adware installed Yahoo Toolbar... Bit odd?

Then I think where this al started is that fact that AVG spyware freeware version stops updating and scanning with new databases after a while... Maybe just keep them in-order, so when I uninstalled it, all hell broke loose...

Anyways thanks for all the help, hopefully this will work till I get to that cd...

Just one more thing, I see activity on the router (On and Off) and on my International connection even though atm Im not loading anything, anyway I can check if some adware isnt maybe trying to communicate or should the 2 programs sourt that out?

Maybe just the apps talking to server to check for updates?
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X