Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Virus that shuts down Spybot!
Name: steveathome Date: March 23, 2008 at 12:31:20 Pacific OS: windows xp CPU/Ram: 256 MB
Comment:
I have a virus that shuts down Spybot and AVG when I run them, unless I run both in Safe Mode. But in Safe Mode Spybot or AVG will not get rid of the virus that shuts them down.
This started to happen on my PC around the time I got annoying junk spyware ads.
Another approach; boot up with a Linux variant on a CD - e.g. Knoppix or Ubuntu. Once up and running go on-line and again scan the system as above; also perhaps run the built-in scanner that is with both linux variants on a CD?
Also disable system restore until you have cleaned out the system... Perhaps do that first and then try a standard reboot and see if you can run a scan etc? If it fails at any part of this approach... it then use the on-line approaches as above?
But leave system restore disabled until clean.
0
Response Number 2
Name: steveathome Date: March 23, 2008 at 13:12:32 Pacific
Reply:
Thanks for your help! I will try those approaches.
steve at home
0
Response Number 3
Name: trvlr Date: March 23, 2008 at 13:19:28 Pacific
Reply:
Incidentally, if the pest is identified... note its name, details, etc; post here for others to be aware... And also do a trawl (google/yahoo etc. ) for possible resolutions?
0
Response Number 4
Name: per Date: March 23, 2008 at 15:18:55 Pacific
Name: effient Date: March 23, 2008 at 19:53:29 Pacific
Reply:
(1) Goto GMER.net, (2) Download GMER, (3) Install it in SAFE MODE. (4) Run GMER in SAFE MODE and see if you have a ROOTKIT on your drive. (Note: GMER may install GMER.sys in your windows/system32folder -- in order o erase the rootit/virus) (5) Please POST oyur GMER log here.
This happened to a Chinese friend of mine. Nothing stopped the rootkit to overtaking the kernel. Of course I ended updoing hard formatting and re-installing XP.
0
Response Number 6
Name: steveathome Date: March 25, 2008 at 17:26:37 Pacific
Reply:
It definitely looks like a SmitFraud Virus. But I have no idea how to "boot with DOS or Linux, then remove the files, then afterwards remove the registry keys" as per the suggestion from Wikipedia (above in Response #4).
steve at home
0
Response Number 7
Name: dadjlh Date: March 25, 2008 at 21:25:21 Pacific
Summary: First-timer here... I think I may have a virus. My computer will just shut down unannounced. I have tried using McAfee twice, the online free version and the one on my Dell. Both times, I notice th...
Summary: Symantec: "This problem was fixed for some Norton programs in the latest Common Client and Norton AntiSpam program updates. To install the update, start your Norton product, run LiveUpdate, download ...
Summary: At shut down, I get the following message: "The application failed because the windows station is shutting down" No application or module name is displayed. The above message is flashed so fast I had ...
0 
