Page 1 of 2 12 LastLast

  1. Joined : Aug 2015
    Posts : 20
    Windows 10
       19 Aug 2015 #1

    Help with a virus


    Hi everyone,
    So here is my issue, I installed some software but it turned out to be a fake version of that software. It installed a ton of bloat and popups and all of that. When ever I uninstalled the software it would reinstall itself and it was a huge mess. I was able to get rid of all the software and all the files it put on using MacAfee and everything seemed to be fine.

    Now I have found an issue that I cant seem to solve. When browsing the internet, sometimes when I click a completely legit link it will take me to a spyware like website with fake error messages and things like that. I ran a full scan with MacAfee and it said no threats were found. I also tried the windows Malicious Software Removal tool but that found no issues as well.

    I know the right thing to do would be to reinstall the OS but I'm using this with Bootcamp on my mac and bootcamp is very hit or miss when trying to install windows. It took me 2 days to manage to get windows installed on it. My next issue is that several games are installed that take up a lot of space and hours to install (GTA V 60GB, GTA IV 30GB, other games as well) and I also have a lot of personal data on there. I am hoping that this can be solved without reinstalling the OS.
      My System SpecsSystem Spec


  2. Joined : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 11,402
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       20 Aug 2015 #2

    Four tools you might want to give a try with to find the malware:

    First, run RKill, which will attempt to stop any malware processes currently running. Do NOT reboot after running this.

    As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again. Instead, after running RKill you should immediately scan your computer using some sort of anti-malware or anti-virus program so that the infections can be properly removed.
    There is always the possibility that one of those infections installed a rootkit. Start with TDSSKiller to rule out that possibility.

    Note   Note
    When running TDSSKiller, launch the program, click on the blue text "Change Parameters" & check the box marked "Detect TDLFS File system." Click OK & then run the scan.


    Malwarebytes (the free version). D/L, uncheck the "start free pro trial" at the end of the installation. Do a full system scan, check anything it finds & allow it to move it to quarantine. A reboot may be required. If later you wish to buy the pro version, that features auto updates & active background scanning.

    AdwCleaner is good at ferreting out adware.

    Hope these programs help you find the culprit.
    Last edited by Borg 386; 20 Aug 2015 at 09:03.
      My System SpecsSystem Spec

  3.    20 Aug 2015 #3

    Try ....ESET ONLINE SCANNER....I ran Microsoft Online Scanner and Malwarebytes Scanner...but it was the best
    It's found more infections than Dr Schweitzer....
    And eliminated them!!!
      My System SpecsSystem Spec


  4. Joined : Aug 2015
    Posts : 20
    Windows 10
       20 Aug 2015 #4

    Borg 386 said: View Post
    Four tools you might want to give a try with to find the malware:

    First, run RKill, which will attempt to stop any malware processes currently running. Do NOT reboot after running this.



    There is always the possibility that one of those infections installed a rootkit. Start with TDSSKiller to rule out that possibility.

    Note   Note
    When running TDSSKiller, launch the program, click on the blue text "Change Parameters" & check the box marked "Detect TDLFS File system." Click OK & then run the scan.


    Malwarebytes (the free version). D/L, uncheck the "start free pro trial" at the end of the installation. Do a full system scan, check anything it finds & allow it to move it to quarantine. A reboot may be required. If later you wish to buy the pro version, that features auto updates & active background scanning.

    AdwCleaner is good at ferreting out adware.

    Hope these programs help you find the culprit.

    Gave all those a try and they removed a lot of malicious files but in the end I was still getting redirected to suspicious sites. And eventually I got a blue screen. I backed up my stuff and I'm currently trying to reinstall windows but of course it is taking hours so far because Boot Camp does not work very well at all
      My System SpecsSystem Spec


  5. Joined : Aug 2015
    Posts : 20
    Windows 10
       20 Aug 2015 #5

    LVMan777 said: View Post
    Try ....ESET ONLINE SCANNER....I ran Microsoft Online Scanner and Malwarebytes Scanner...but it was the best
    It's found more infections than Dr Schweitzer....
    And eliminated them!!!
    Thanks for your suggestion, unfortunately I blue screened and had to reinstall windows.
      My System SpecsSystem Spec

  6.    20 Aug 2015 #6

    mpalomba3 said: View Post
    Thanks for your suggestion, unfortunately I blue screened and had to reinstall windows.
    Was there a phone # in the BSOD?
      My System SpecsSystem Spec


  7. Joined : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 11,402
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       21 Aug 2015 #7

    mpalomba3 said: View Post
    Gave all those a try and they removed a lot of malicious files but in the end I was still getting redirected to suspicious sites. And eventually I got a blue screen. I backed up my stuff and I'm currently trying to reinstall windows but of course it is taking hours so far because Boot Camp does not work very well at all
    Unfortunately, some malware nowadays damages the OS files to a point that you have no choice but to do a reinstall. I'm sorry to hear you were unable to clean the infection.

    In the future, there are 2 options you may want to consider. You can do a Repair Install, or make a system image.

    Keeping the system image on a external hard drive that is not always connected to the PC/laptop is a good way to safeguard it & be sure to make images of the system on a regular basis. If disaster should strike down the road, you can restore everything to how it was at the time the system image was made.

    A system image is an exact copy of a drive or partition which can be used to restore your PC to the state it was in at the time the image was made. By default, a system image only includes the drives that Windows requires to run, including Windows 10 itself, your system settings, programs, and files. You may also include any other drive in the image if you wish. When you restore your computer from a system image it is a complete restoration, you cannot choose individual items to restore and all of your current programs, system settings, and files are replaced with the contents of the system image.
    System Image - Create in Windows 10 - Windows 10 Forums

    Repair Install Windows 10 with an In-place Upgrade - Windows 10 Forums
    Last edited by Borg 386; 21 Aug 2015 at 08:15.
      My System SpecsSystem Spec

  8.    24 Aug 2015 #8

    Do yourself a favor try these free tools to add to your arsenal, ghostery plugin for your browser blocks all the nasties along with adds, and trackers. Also malwarebytes anti exploit and best of luck with it next time sorry you lost it to a virus.
      My System SpecsSystem Spec


  9. Joined : Jul 2015
    Posts : 733
    Windows 10 Home x64
       24 Aug 2015 #9

    WARNING:

    Latest AdwCleaner 5.003 doesn't WORK AT ALL. It will give you an error message when trying to clean and it will shut down itself.

    Another option is ZHPCleaneer by Nicolas Coolman

    BUT check thoroughly the log after scanning. Sometimes not everything it wants to delete are actually malware. You can untick those items you don't want to be removed though.

    I usually use several programs of this type when cleaning malware: AdwCleaner, ZHPCleaner, Malwarebytes, RogueKiller...
    It's safer to run several of them.
      My System SpecsSystem Spec


  10. Joined : Aug 2015
    Posts : 52
    win7 and ubuntu
       25 Aug 2015 #10

    Borg 386 said: View Post
    Unfortunately, some malware nowadays damages the OS files to a point that you have no choice but to do a reinstall. I'm sorry to hear you were unable to clean the infection.

    In the future, there are 2 options you may want to consider. You can do a Repair Install, or make a system image.

    Keeping the system image on a external hard drive that is not always connected to the PC/laptop is a good way to safeguard it & be sure to make images of the system on a regular basis. If disaster should strike down the road, you can restore everything to how it was at the time the system image was made.



    System Image - Create in Windows 10 - Windows 10 Forums

    Repair Install Windows 10 with an In-place Upgrade - Windows 10 Forums
    I made a cloned backup of the drive with minitool partition wizard, they call it a copy, so I dont have a snapshot, I have a drive with an OS, just plug it in and it works, nothing to restore.

    Why do people use a system image, if you can just make a clone?
      My System SpecsSystem Spec


 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Solved IE11 starting url is old search virus artifact
I need a little latitude here for my issue. Thanks. While using Windows 7 and IE8 (reverted for specific reason), I picked up one of those nasty, malware search viruses that I was able to eliminate from my system, except for the starting url in...
AntiVirus, Firewalls and System Security
VIRUS TOTAL Bookmarked
While Miles was helping some one in Eight Forums he made a recommendation for the user to scan a URL with an online scanner. An then it came to me, I should have Virus Total bookmarked. https://virustotalcloud.appspot.com/static/img/logo.png ...
AntiVirus, Firewalls and System Security
Does Windows 10 Deserve a More Powerful Anti-Virus...
More
Windows 10 News
Virtual Machines/Virus Software
Hi, This is unrelated to Win 10 so thought this area might be best I put the VMWare Player on my PC to use Win 10 and would also like to now try putting XP on it for a bit of nostalgia, no networking with host but would like internet on it ...
Virtualization
rundll32.exe detected as virus by Avast
Hi, I have a big issue i have all the time a popup coming from Avast saying it has detected a virus in rundll32.exe It comes when i open explorer or when set volume. Now the worst is that i cant even setup the playback devices for my...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 20:45.
Find Us
Twitter Facebook Google+



Windows 10 Forums