virus help: HELP! - Help.com

Hey. I know this virus pretty well. there is only one way i have come across to beat this. if its the virus i have in mind, everytime you try and run a security related product (Malware Bytes, Autoruns, Sysinternals anything, AVG etc.) it turns it into an MS-DOS file, therefore effectively eliminating the programs ability to run. You need to download Ultimate Boot CD for windows, just google it. Download the .iso file and burn it to a disk. Reboot the PC and boot from the UBCD. It creates a virtual drive (B:) and allows you unrestricted access to the OS on the same machine (C:). You then need to enable networking, and use Firefox (embedded in UBCD), to goto SBSD and download the newest virus definitions. Then launce SpyBot Search and Destroy (also embedded in UBCD) and load the definitions you just dl’ed. Run a scan on the local drives, should take between 2 and 5 hours. Remove any threats that it finds, then reboot normally to windows. Run an MBAM update and a quick scan. Remove any and all threats/infections, and reboot. Re-update MBAM and allow it to run a full scan. Should come back clean.

I know this is a long, drawn-out process, but it is effective. I do this for a living, and have seen this viruss one too many times. Good luck!!

no you wont lose anything. the os will stay in tact, and none of your data will be affected. the thing that UBCD does that you cant do by say hooking your hard drive to another pc and scanning it, is it actually loads the registry from windows and allows SBSD to scan the registry for infections, as well as the file structure.

i call this my back door. hasn’t failed me yet. i hate reloading an operating system, and until i figured out this was possible, a reload was the only was to effectively remove some of these newer viruses.

one thing to try before you get deep into UBCD, find mbam.exe in the program files folder, and rename mbam.exe something rediculous, like fluffykitty.exe or bobsbootycall.exe or ilikebeefjerky.exe. you get the point. something off the wall that has no indication of security. if it still wont run, go into safe mode (f8 at boot-up) and edit the permissions on the mbam.exe file, to deny ’system’ access to it, you may be able to run MBAM without having to use the back-door method. And MBAM is a GOD when it runs. best utility out there.