[timothyleery09]

Just picked this bugger up. Didn't take long to inflict damage. Read some advice about going to task manager then process tab. Deleted windwowsantivirus exe process and the svchast exe as recommended. Considered doing RESTORE but Control Panel was being limited in its use do to this infection. Able to find location from shortcut of this virus on my desktop. Found the file and deleted it and the dll's in this folder too I believe. As I am learning this is not the totality f neccesary steps. Still need to clean registry. Problem is now I can't get back on. Restarted in SAFE MODE and can't seem to get past the opening screen displaying ??? or in NORMAL MODE with it either stuck or excruciatingly slow in the Checking file system on C: The type of the file system is NTFS. The volume is dirty. Verifying files page...... Can I circumvent this loading process by getting straight to command prompt boxes to go through with the processes? Also what programs can I use to search out and detect the source of this virus/adware/trojan once I am up and running?

[rodi]

Hi,

I don't think that you can circumvent loading process. You may use either MalwareBytes anti-malware or Spyware Doctor. Both removes malware effectively. I recommend you to scan your PC with both programs to make sure that there are no infections left. Remember, you have to rename the installer of downloaded program, otherwise the program will be blocked. It could be like test123.exe or similar, doesn't matter really.

Spyware Doctor:
http://www.2-spyware.com/review-spyware-doctor.html

MalwareBytes anti-malware:
http://www.2-spyware.com/review-malwarebytes-anti-malware.html

Good luck

[timothyleery09]

Thanks for the reply,
I have attempted your solution. In fact I had at that point attempted said advice. I downloaded Malwarebytes software but due to the problems Im having am not able to load or run. After I renamed it and ran as came up with a device attached to the system is not functioning box. If I attempted to open it as oppossed to run as the open with what program box came up with no apparent workable options to initiate the process. What program could I use to open this with? If I can't use Malware or some other automated software option I am back to the manual removal option I have been attempting. If someone can help explain more clearly without making any assumptions in knowledge about going the command prompts "mode" to clear or change the affected directories. I had already deleted the Windowns AntiVirus Program file. Think I deleted the DLL's that went with it but the directory and the "roots"? Hope I didn't delete neccesary DLL's with it. There were only three and they were in the same folder as W A V program folder?problem remain. Anyone have a clear understanding and can thoroughly describe the cmd is it pskill functions, et al?

[kellerpaul]

Hi there,

I work for a county govt. office in Texas and we have many users who receive malware periodically. These authors of Malware, Adware or whatever you want to call it are getting smarter as each day passes.

I worked on a computer last week where the machine was infected and anytime you would click on ANY executable application you were prompted with a window that said to pick an application to open this type file. What happened was the malware changed the registry to where executable files had no way of running. I went to Google and entered "cannot run executables" and the first link takes you to a web site that offers a program to fix the registry keys that allowed me to install MalwareBytes afterward. The file name is named exefix_xp.com. Notice the .com extension since this is what will run since .exe don't run presently.

I recommend you run MalwareBytes and SuperAntiSpyware as these are great tools. If I remember right I had a couple issues to fix afterward. I think I had an issue with Internet Explorer and reinstalled it. I know in the end I fixed the booger and haven't heard back from the end user.

I hope this helps you and others. This site is a great source on how to fix malware issues. I just registered today and am impressed with 2Spyware's site.

Paul

[rodi]

Thank you Paul, we appreciate your contribution. And welcome to 2-spyware.com