Need help removing a virus.

May 15, 2011 at 20:20:26
Specs: Windows XP, 1.80 GHz/1.43 GB of RAM
I have a really bad virus on my computer. It won't let me browse the internet with FireFox and every time I open anything a new process, kit.exe, starts. I'm able to end it but it eventually comes back in multiples if I do.

I read a few forums but can't find anything that actually helps me (mostly because I can't understand what's being said - I'm not a "techie"), so I was wondering if anyone here could help me out.

I ran a few scans and below are the logs. The virus wouldn't let me run ComboFix. I could download it but the .exe file got changed to a different name in the process and when they told me to change the name back (a message popped up) the virus started 12 new processes and shut my system down. It did the same thing with Malwarebytes' Anti-Malware. As for Kaspersky, it scanned for about two hours, was at 75% then fell down to 12% and got stuck there for another 2 hours so I couldn't do a scan on there.

edited by moderator: remove un-requested log

See More: Need help removing a virus.

Report •

May 16, 2011 at 12:37:19
Wow. Have you tried running in safe mode before trying to clean up the virus?
If that doesn't work either, would you consider removing your hard drive and USB-convert it with a SATA to USB converter, then attaching it onto a virus free computer with a good antivirus installed? You can then scan and clean your USB attached hard drive that way.

You may want to consult the top ten antivirus 2011 review in case you haven't.

Report •

May 23, 2011 at 17:55:45
I couldn't boot in safe mode. I got to the menu and selected it but it just froze on a list of system files. I don't think it's the virus since it wouldn't have enough time to load (at least I don't think so), so I don't know what's going on.

Report •

May 23, 2011 at 20:29:48

See if you can download the following program: SASSafeRun
(SuperAntiSpyware (SAS) SafeRun). It is a SAS portable launcher.

If the file does not download, copy/paste the following >>without the brackets<< to the address bar of your browser:

If you still cannot download it to the infected computer, use a clean computer, and then download and save the program to a USB flash drive.

Plug in your USB flash drive in the infected computer, and double-click SASSafeRun.COM..

When SuperAntiSpyware opens, select:
Scan your computer > Perform a Complete Scan

When done, go back to the SuperAntiSpyware main screen,
Click on Preferences
Click: Repairs tab
Scroll down and select Repair broken SafeBoot key
Click Perform Repair and follow the prompts.

Once again, on the main screen, click on the Preferences button.
Click on the Statistics/Logs tab
Double-click on the most current log.

Please provide the SuperAntiSpyware log in your reply so we can see where we are at, and plan any additional removal strategy, if necessary.

Report •
Related Solutions

Ask Question