ANTIVIRUS!!! read me guys, seriously

[ZionTazia]

There is a virus that sits in the atapi.sys file (inside C:\Windows\System32\drivers), and no other tools but this can remove it, I know because I have just removed it from my girlfriends pc and used hours to search on forums and search with online scanners, just make a search for either atapi.sys virus or virus in windows temp folder.

This virus kept making new svchost.exe files in different named folders inside windows/temp, then the antivirus made a popup, I put it in quarantine, and then two minutes after it made a new folder and the popup came again and so on.

I read somewhere that I had to put the harddrive on another pc and from there delete the atapi.sys file, but before I did that I searched some other forums and there I found some that had repaired it with Hitman35, which then removed mine to.

And as the OP also said, it's only to remove virus/rootkits/adware/spyware etc. and not to use instead of the anti virus program you have installed, it can find and remove things that many others don't.

 

[blackmagicmaster]

I think still KasperSky Is Best in Antivirus / But i always trust my sandboxie

 

[ovidius]

I have nod32 and use the windows firewall . Hitman found only one trojan, it was something linked to radmin....Thanks for the program.

 

[kimkils]

thanks for the link will do a scan... i use tiny personal firewall and nod32, along with malware bytes

 

[Arraial]

I get this warning when trying to download:

I got the same warning...

 

[stopnstare]

ALLWAYS, install malwarebytes (Registered) in addition to your current anti-virus program. Keep a backup IE or firefox download as well. And don't forget to have Rkill handy too. I have had many clients where the malware deleted IE completely! I allways hated telling people to nuke and pave or repair because they had no browser and no one to get a copy of IE/Firefox from.

 

[Tony57]

There is a virus that sits in the atapi.sys file (inside C:\Windows\System32\drivers), and no other tools but this can remove it, I know because I have just removed it from my girlfriends pc and used hours to search on forums and search with online scanners, just make a search for either atapi.sys virus or virus in windows temp folder.

I'd be careful removing this file...

hxxp://forums.malwarebytes.org/index.php?showtopic=30371

and

hxxp://forums.malwarebytes.org/index.php?showtopic=30365&st=0&p=156278&#entry156278

Doing so caused these guys to end up with an unbootable PC!!!

Tony

 

[ZionTazia]

I'd be careful removing this file...

hxxp://forums.malwarebytes.org/index.php?showtopic=30371

and

hxxp://forums.malwarebytes.org/index.php?showtopic=30365&st=0&p=156278&#entry156278

Doing so caused these guys to end up with an unbootable PC!!!

Tony

That's true, I read somewhere that to remove it, you should move the hard drive to a clean PC with the same OS and then copy it from there, and he wrote that it could be very difficult, but anyhow Hitman Pro have cleared the PC and there have been nothing now for 14 days.

 

[jellyfish]

As much as i hate Microsoft, they have the best spyware protection on the market and its free...
Security Essentials, u'll need a legit copy of windows though.

kaspersky has too many flase postive , nod and avira are fine.

 

[kambog]

can u tel me any free usb anti virus w8ing ur thanks

 

[endeliz]

ESET is by far the BEST there is ....
if you are on ANY social site YOU REALLY NEED IT !
http://www.tkqlhce.com/click-3426510-10583070

 

[endeliz]

As much as i hate Microsoft, they have the best spyware protection on the market and its free...
Security Essentials, u'll need a legit copy of windows though.

kaspersky has too many flase postive , nod and avira are fine.

are you high ??? Security Essentials is one of the more useless things microstupid came up with ! ..completely useless software !

 

[Twats]

are you high ??? Security Essentials is one of the more useless things microstupid came up with ! ..completely useless software !

no it's not. have to disagree with you and agree with jellyfish. i would say that finally M$ made one software that's worth something

windows defender, yeah, that's useless lol

 

[noober]

Somewhere along the line, I picked up the "Vista Security Tool". I don't wish this one on anyone. It will drive you nuts.

First, it lies about your computer being infected with a host of named viruses. Then it offers to clean your computer if you will register the program. Just "Click Here"

Don't click anywhere. Just close the endless pop ups.

Hopefully, you will still be able to access myantispyware.com and download the program mbam.exe.

Once at the myantispyware.com website you should look for the particular edition of the "Vista Security Tool" that you have, there are several and include an XP version, among others.

Read the information on the website, maybe twice, and follow directions.

The Step 1 involving the fix.reg and fix.inf did not work for me but I seem to have gotten good results with the mbam.exe program.

The main culprit in this thing seems to be the Trojan virus ave.exe so make sure you get rid of that, but do follow the directions.

Then use whatever programs you have on your computer to clean up any residual files left over - Norton's, Windows, or any of the others and you should be fine.

AN IMPORTANT NOTE: Maybe I should have mentioned this at the beginning. Once you have determined that your computer has been infected with the "Vista Security Tool" or one of its iterations, shut down your computer and restart in Safe Mode. Probably, the quicker the better. Press F8 several times while your computer is rebooting. Go to Accessories/System Tools/Restore and restore your computer to a good, known restore point. Once it is running navigate to myantispyware.com and follow the directions as above.

If it doesn't work, try any one or more of the programs mentioned above.
Good Luck

 

[Scrog]

"Binder detector:File is possible binded with malware" - Interesting.

http://scanner.novirusthanks.org/analysis/dff1031b5caae508822c8b43922ef515/SGl0bWFuUHJvMzUuZXhl/

 

[vasilicaciortan]

Thanks man. It really helped. Found 1 trojan and 2 malware. Really good tool. Btw I use nod 32 Smart Security and didn't detected these problems. Maybe I should find something more powerful. Any sugestions??

 

[Wal-Mart]

im using norton antivirus atm
but i ll give this a try
thanks for sharing

 

[GreyWolf]

Thanks for the share OP.

Malwarebytes' Anti Malware is another really good one for finding more nasties. And you can use it for free.

Best thing anyone needs to know about viruses, is that you should use more than just one tool for identifying and dealing with them. Definately have your main AV program running all the time, but also manually run other anti virus tools occasionally too. How often to do the manual scans depends on what your doing online. downloading a lot of scripts and programs? then run the tools pretty regularly, visiting warez and porn sites, then run them even more.

Same thing applies to spyware. You should have more than just one tool for dealing with it.

 

[voyevoda]

Another suggestion:

Create a separate non-admin account for day to day usage of your Windows machine.

Only administrator accounts can install services, drivers, edit startup files, etc.

Unless your version of Windows is vulnerable to a privilege escalation exploit, you can't actually harm your computer when logged in as a non-admin.

 

[rocket]

Webroot Security Essentials. No worries. Bad ass AV. No viruses since I bought it 3 yrs ago.