Solved How do I eliminate a virus if my antivirus stopped working?

July 18, 2015 at 14:51:38
Specs: Windows 8.1
I had Avira installed and it disappeared all of a sudden. Avira has been running normally for the last few years. Then I downloaded and tried to setup AVG and afterwards Avast on my laptop. They installed but don't start-up. I think it's the dmw.exe file, which I can't stop in task manager, but I'm not sure. Please help!

See More: How do I eliminate a virus if my antivirus stopped working?

Report •


#1
July 18, 2015 at 15:16:33
✔ Best Answer
Just to get the ball rolling, please try to run these in the order given:

AdwCleaner:
http://www.bleepingcomputer.com/dow...
(blue Download button near top - not anything else on the page).
Download and "Save" the file somewhere. Go to the saved file then double click it to run the program. Use the "Scan" button, followed by the "Cleaning" button.

Junkware Removal Tool (JRT)
http://www.bleepingcomputer.com/dow...
(blue Download button near top - not anything else on the page).
Download and "Save" the file somewhere. Go to the saved file then double click it to run JRT. It might appear to have stopped at times or flash the screen but sit tight until it has finished.

MalwareBytes:
http://filehippo.com/download_malwa...
(green Download button top right - not anything else on the page)
Install and Run the program but before doing its Scan go to "Settings > Detection and Protection" and put a checkmark in "Scan for rootkits". Quarantine anything it finds.

Please copy/paste the logs on here. I appreciate that they might not all run but any that do will be a step in the right direction. A Johnw on this forum will probably pick up this post later as he is particularly expert in malware removal.

Always pop back and let us know the outcome - thanks


Report •

#2
July 18, 2015 at 15:57:10
You can only have one AV installed, uninstall ( using the special tools ) what you don't want.

Copy & Paste the contents of the logs after doing post #1, in your reply.

Comprehensive List of 26 Uninstallers and Removal Tools for Internet Security and Antivirus Software
https://www.raymond.cc/blog/compreh...
Ultimate Collection of Uninstallers / Removal Tools for All Popular Antivirus Software
http://www.askvg.com/ultimate-colle...


Report •

#3
July 18, 2015 at 16:00:01
It is a sad state of things when even downloads for free utilities designed to remove junk from our computers (good ones) are on pages that we have to be warned not to click on all of those fake download buttons that are ads for more junk that we absolutely would not want.
Help! Stop the world, I think I want to get off here....
When is the next ship leaving for the colony planets? In the 1970's we were practically promised them by now. At least Mars should have been terraformed by now.

You have to be a little bit crazy to keep you from going insane.


Report •

Related Solutions

#4
July 18, 2015 at 17:53:44
Mars has been terraformed - to resemble parts of Arizona, S. California (the Anza Borrego Desert area), S.Utah..., and a little of central Sahara... But the green 'n blue parts (the best bits) are hidden from us mere mortals by a vast holographic array, designed and installed by "sh..., you know who..."" to keep us in the dark about it all... Projects a stored image of Mars as was about 50yrs ago... But if I tell you anything more than the above, then...; well - you've seen the movies, about the men in dark suits and sunglasses... all produced as warning...

message edited by trvlr


Report •

#5
July 19, 2015 at 07:41:35
"I think it's the dmw.exe file"

My guess is you mean DWM.exe. It should be a legit file/process (Windows Desktop Manager) but some viruses disguise themselves as legit files.

You're going to make things worse if you just keep installing antivirus programs. To steal a line from the classic movie, Highlander - there can be only one. If you can, uninstall all the extra AV programs you installed & leave Avira.

Then create a bootable rescue disc & try removing the infection from outside of Windows.

http://pcsupport.about.com/od/syste...


Report •

#6
July 19, 2015 at 09:47:37
Hi Derek,

Thanks a lot! I completed a scan with AdwCleaner and it detected the Speedy PC virus. Afterwards, I could reinstall my antivirus successfully and run it as usual. The executable file was roboot64.exe.

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\speedypc software
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\predm
Folder Deleted : C:\Program Files (x86)\speedypc software
Folder Deleted : C:\Program Files (x86)\Common Files\speedypc software
File Deleted : C:\WINDOWS\SysWOW64\RegistryHelperLM.ocx
File Deleted : C:\WINDOWS\System32\roboot64.exe

message edited by VanessaCollen


Report •

#7
July 19, 2015 at 11:33:21
Be aware that your computer might not be clean of malware and/or viruses. All three steps are necessary and these are just "first aid".

Always pop back and let us know the outcome - thanks


Report •


Ask Question