|
My computer got hacked into Oblivion bys this god damn Virus called Vista Internet Security 2012. It's a fake program that detects fake threats and tells you to buy it. Problem is, it blocks everything, can't use the internet, can't use Run...
This is the virus and this is the removal guide I found: http://freeofvirus.blogspot.com/2011/06/vista-internet-security-2012-removal.html
or http://www.2-spyware.com/remove-vista-internet-security-2012.html
I did step 1, and terminated the process in Windows Task Manager but I can't edit the registry (step 2) because the "Run" program just doesn't work. It tells me that "regedit" and "cmd" .exe are not found.
I tried in both SafeMode and Normal Mode ang I got the same message. I can't open any .exe basically.
So how do I get in my registry ?
|
Try to go into safemode and remove it with Malwarebytes.
edit: actually, maybe wait for someone more knowledgeable to help fix it. Doing things like this have worked for me in the past though.
|
you'll probably need to make an antivirus boot disk
I've never used one though so can't recommend anything
|
|
|
I got a very similar virus some while ago (cant remember if it was the same 1). But anyways what i did was that as you start up the computer, go into task manager before it blocks anything, you have a small window here. Then find a wierd process (usually some weird combo of numbers and letters), click open file location and just delete the folder.
I tried a lot of programs to tried to remove it, but it was as simple as this.
Worth a shot i guess. Just gotta hit your timing. Also, when you get to the folder after opening file location, just change the name so that next time you open the computer you can remove it during that window you have.
Sorry if it doesnt help, but worked for me with a really similar virus.
|
Reinstall windows? It's not so nice as just recovering your computer as is, but as far as simple solutions, it's pretty good.
|
can you run msconfig ?? if so look for it on there ... it can still be running in the background and blocking your .exe functions. if you find it on msconfig and can stop it from running on boot then you should restart and then get access to your registry files and go from there 
DONT TOUCH ANYTHING ELSE IN MSCONFIG YOU CAN INSTANTLY SCREW YOUR PC/LAPTOP
much esports love
|
On August 06 2011 00:06 RedJustice wrote:
Reinstall windows? It's not so nice as just recovering your computer as is, but as far as simple solutions, it's pretty good.
This solution should always be used last.
make sure you back-up all that you can if you do decide to reformat.
|
On August 06 2011 00:09 asendent88 wrote:
can you run msconfig ??
No. I can't open anything.
msconfig.exe was not found.
Please TL, you're my only hope.
|
malwarebytes.
run it in safemode. If you cant access the internet to download it then you should download it on a other computer and put it on a memory stick. Then go into safemode and run it.
|
On August 06 2011 00:15 pStar wrote:
malwarebytes.
run it in safemode. If you cant access the internet to download it then you should download it on a other computer and put it on a memory stick. Then go into safemode and run it.
I already have malwarebytes but I can't open/run it... Safemode or not, doesnt change anything.
|
Im no expert but ive had that virus and i just run system restore to a previous point and that fixed it. But like i said im not an expert.
|
On August 06 2011 00:20 Darkdeath3 wrote:
Im no expert but ive gooten that virus and i just run system restore to previous point and that fixed. But like i said im not an expert.
I haven't tried this yet but I can't open ANYTHING so i don't see why that program would open and not any others...
If I can't figure out anything else, I will have to try this tho.
|
On August 06 2011 00:23 TuElite wrote:Show nested quote +On August 06 2011 00:20 Darkdeath3 wrote:
Im no expert but ive gooten that virus and i just run system restore to previous point and that fixed. But like i said im not an expert. I haven't tried this yet but I can't open ANYTHING so i don't see why that program would open and not any others... If I can't figure out anything else, I will have to try this tho.
Did you try my suggestion? Are you sure you cant open anything even right when you start up the computer? Usually you'll have a window of like 30secs to open something before the virus starts or whatever. Could be a much more refined version of the virus i got...
|
Try a rescue cd, most anti virus companies have them. I suggest the Kaspersky rescue disk.
|
try downloading malwarebytes on another computer and installing it via a USB device in safemode, my friend was infected with this same virus (2011 version?) and we were able to remove it by doing so.
edit: We may have renamed the installer or removed the .exe extension and manually selected how to launch the program, I don't recall now hope you can fix it. ^^
|
On August 06 2011 00:25 Deadlyfish wrote:Show nested quote +On August 06 2011 00:23 TuElite wrote:On August 06 2011 00:20 Darkdeath3 wrote:
Im no expert but ive gooten that virus and i just run system restore to previous point and that fixed. But like i said im not an expert. I haven't tried this yet but I can't open ANYTHING so i don't see why that program would open and not any others... If I can't figure out anything else, I will have to try this tho. Did you try my suggestion? Are you sure you cant open anything even right when you start up the computer? Usually you'll have a window of like 30secs to open something before the virus starts or whatever. Could be a much more refined version of the virus i got...
I already stopped the Virus's process and deleted the files that caused it (from Task Manager). So that's "gone" the virus doesnt "start' anymore like it used to so i got all the time in the world...
Now it's just that I can't open or access anything. But at least I've gotten rid of the virus process that caused the fake scans and everything.
|
Try renaming the malwarebytes executable. Some of these viruses block programs on a name basis.
|
Have you tried the system resotore or can u still not start any programs?
|
On August 06 2011 00:36 Sinborn wrote:
Try renaming the malwarebytes executable. Some of these viruses block programs on a name basis.
-__-, yeah I wish it was that easy.
|
|
|
|
|
|
EPT
