My computer has a virus - please help!

[1337WuLF]

I got rid of this on Windows 7 with Spyware Doctor and Malware bytes.

 

[kriswithak]

i recently fixed someones computer from this same exact virus. The virus didnt let me open malwarebytes in safemode. If you google how to open exe files or even just google "XP Internet Security 2011" a guide in some forum will tell u how to open malewarebytes and remove the virus. I believe its called fixNCR.reg. U can find anything on google. Use it.

 

[pyrokinetic]

spyware doctor, search & destroy and avira have always done the trick for me and some friends

 

[appliedscience]

Thanks guys, I would try those things but the computer won't let me open it. It's basically just frozen on loading now. I think the only choice I have is to re-format. Appreciate any assistance in how I need to do this without any discs.

 

[Razarulz]

Thanks guys, I would try those things but the computer won't let me open it. It's basically just frozen on loading now. I think the only choice I have is to re-format. Appreciate any assistance in how I need to do this without any discs.

i think there's no such way for re-format without any discs :scratchch
unless you have another OS disc like xp, win 7 you can try to reformat it by booting your computer when you starting your PC

 

[Kaiser.]

Sorry to hear, there is many things you can do. Try downloading MalwareBytes and scan with it. And I suggest you change to a better AV.

 

[oxonbeef]

Did you not think of searching before listening to every so called pc security expert on BHW?
http://www.google.co.uk/search?q=XP%20Internet%20Security%202011%20removal&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a&source=hp&channel=np

XP Internet Security 2011 is a one of rogue anti-spywares created by the cyber criminals who should be blamed for letting into the wild a bunch of fake security and malware antiviruses in the middle of November like Win 7 AntiMalware 2011. Their active malvertising campaign is associated with money which is asked for the licensed program's version. Being admitted as unwanted and dangerous program, XP Internet Security 2011 will infect only those PCs that run Windows XP OS. It is known to create security and privacy problems because it also allows its creators to reach the infected machine and steal personal information. Remember, if you want to avoid these negative consequences, you must remove XP Internet Security 2011.

Since XP Internet Security 2011 is rogue anti-spyware, it acts quite predictably. It installs itself without permission and modifies computers registry to make itself launched after every computer's reboot. When operating on your PC, XP Internet Security 2011 keeps faking the antivirus activity, so it runs phony security scanners at start up or in the middle of computer usage session. Also, malware triggers a great number of popup ads, alerts and fake Windows Security messages that announce numerous viruses detected, like that:
Then, malware won't stop until you purchase its licensed version as the only remedy that will help for your PC. Never fall into registering XP Internet Security 2011 licensed copy because there is no such! This program is not what it claims to be, so please eliminate this program! Remove XP Internet Security 2011 virus using the additional guide written below:

To remove XP Internet Security 2011 you will need another PC, as removing it from Safe Mode with networking will not work in most of the cases.

a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:

1. http://www.pctools.com/downloads/afl_2-spyware/sdsetup.exe or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

2.You might want to download Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.

b) Boot normally. Wait for XP Internet Security 2011 to launch, and run exeregfix.reg . This should allow launching legitimate programs

c) Delete or remove the files that are mentioned in our files box. You can use Spyware Doctor to identify the infected files and additional infections or automatic XP Internet Security 2011 removal tool. Do not forget update it before scanning. Remove what it finds.

d) Scan with Spyware Doctor and secondary tools and reboot your PC. This should fully get rid of XP Internet Security 2011.

UPDATE!!!! One of PC security bloggers, S!Ri, has announced about a serial code that may help you to disable those malwares like XP Internet Security 2011 that change their names according to OS they find. Enter this serial code when doing registration: 1145-17884799-7733. This and the order number 21197673 should also work for earlier versions of this type of parasite. After typing them, you should become able to use your anti-spyware, if it fails follow the guide written above. Be aware that these numbers are expected to change in the near future!TE!!!

Funny thing is google! Everyone want's to be at the top of it but no one uses it.

 

[icememory]

if it's XP OS.

download from other machine COMBOFIX (just google it),
on infected machine go to "Safe Mode" (by continuously pressing F8 until you will get to menu, when you turnedg on your machine...), Choose Safe Mode with Networking.
When you will be in, just put in Flash Drive with Combofix on it, and run it.
Follow instructions, (just click always "yes" it will take about 10-30 mins till it will clean everything.

If it's VISTA/7 OS,
Go to save mode, (same process as on XP),
before that download Malwarebytes on different machine, make sure to rename a filename to something else than mbam.exe.
When you will get to Safe Mode, Run it AS ADMINISTRATOR (right button click on malwarebytes setup files -> choose run as administrator, after window pop-up, choose "continue"), install it.. and run QUICK SCAN.. follow instructions. and you will be fine

If you are in New York City, pm me.

 

[appliedscience]

Hey guys, my computer is freezing on start-up, I can't select anything and the XP Internet Security 2011 pop ups don't even come-up. Is there anyway to try and force it to open? I wouldn't mind trying the registration code (mentioned by oxonbeef) followed by a few scans.

 

[pigp3n]

I am a 20 year veteran IT pro.
Best advice I can give is switch from windows to a Linux based operating system.
I use ubuntu with windows running in a virtual machine for testing "freeware"
I would have said get a Mac but they are getting these FakeAVs now too. But are easier to remove on a mac.

Malwarebytes is the next best thing.
or next best is format and reload.
Doing windows restore mode does not work anymore as the rootkit will be in there too.

AND

XP Internet Security 2011 IS FAKE, DO NOT REGISTER IT. IT IS THE VIRUS - PLS READ THIS !!

all they want is your credit card info to auto charge it.

 

[bornformoney]

Get rkill and kill the process first...

then safemode and scan it with malwarebytes = problem solved! what's so hard in that?

 

[seomonopolist]

Yep, Malwarebytes and SuperAntispyware worked for me.

I know there is a virus similar to that one but it differs in the fact that it wont let you access ANY programs other than to get online. On that one I had to reformat my VPS.

 

[appliedscience]

It's hard when my computer won't connect to the internet or open up any of the programs to run an instillation.

Get rkill and kill the process first...

then safemode and scan it with malwarebytes = problem solved! what's so hard in that?

I was able to get spywaredoctor installed but I can't run it without doing updates - which needs internet connection - I can connect the computer to the Internet and have the browser open up Google (that's as far as it will go). I know there is some form of internet connection, it's just for some reason not enough to run spywaredoctor updates so I can do a scan.

Ad-Aware won't open for me now in order to run another scan. And I have tried so many times to open malwarebytes to run the installation, including renaming the file which was mentioned in the thread, but it just won't open.

I was able to enter the code provided as the registration code, which has stopped the malware popping up every 15 seconds with warnings. I'm now wanting to run a few scans to ensure my computer is rid of it...

Any suggestions on how I can do a scan when the programs either won't open or install on my computer? Or how to get spywaredoctor working without needing internet access to run updates... or how to get the internet working properly on the computer? I have tried two ISP's and still have problems.

Thanks guys.

 

[3Infidels]

http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2011

 

[bertbaby]

You just don't listen to me and I am in the damn security business. With some of these trojans you can't go into safe mode and do anything; they are written that well. Kinda of admire their handiwork actually.

You can boot with the Hirens Boot disk and get your files off with little chance of spreading the infection, unless of course you got this from a warez. Then get a Windows CD that matches your version from someone. Next get a freeware utility called Keyfinder to get the old Windows serial number off your computer, you'll need that. Put the CD in and choose to reformat the old C: partition.

 

[NoirHat]

i agree with malwarebytes, super anti-spyware & combo fix last.
holding shift key while booting has prevented some trojans from loading temporarily just so you can scan and remove.
Running malwarebytes .exe from a usb drive may work if .exe's won't run

another tip is getting a bootable Anti-virus rescue disc...paid or free and running that to remove the issue

I've yet had to format just due to an infection...just a matter of the principle..& getting pissed :irked:

this from a degreed computer engineer who's been doin this shit since the first commodore 64 hit the stores.

 

[Gryal-xsserver]

I suggest you to install Kaspersky anti virus and run a whole system scan from the safe mode.

 

[sonobby1]

Just stop right now, youre getting so much advice and trying to many things that is making it worse. Ive had tons and tons of viruses over the years, and I mean bad ones. Just stop now you say you can still get an internet connection? Can you still download? If you can do both these things then go here. http://forum.webuser.co.uk/
Go to where it says forum, and then scroll down to hijack this. Follow the information to create a hijack this log, then let them guys fix your comp. Believe me there brilliant, and its free, although they accept donations. It might take a few days, but they will fix it.

 

[Prime Services]

you should have some new ideas

 

[trafficsource]

probably malware