Comp Help

[Mike From The D]

I have a Norton Anti Virus, and a Spyware Blocker on my comp. But somehow I got a Virus/ pop up for some Anti virus ware that has taken over my comp. I have windows XP, and the second I log on to my Acct the pop-up takes over, If I try to stop it it my comp shuts down, if I try to run a virus scan it shuts down, no matter what I do it shuts down in about 45 seconds. I'm getting Norton warnings saying hostile activity being stopped. is there anyway to run my anti virus with out logging on to windows XP? or to run my pop up blocker with out logging on?...............any help would be great.

[Quiet_Riot]

restart in safe mode (hold down f8 as the comp boots up, then select safe mode from the list). try running a complete virus scan whilst in safe mode and then report back.

[russian]

yea go into safemode and then try to scan it for viruses, and spyware. dont go into safemode WITH networking, because you have no antivirus or antispyware in the background to protect you. after you scan in safemode and remove what you can go back into regular mode and:

http://www.freewebs.com/arabianknight_47/removevirusesnow.htm

make sure you download this from microsoft. a very helpfull tool (http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en)

tell us what happens

[Mike From The D]

No virus found, couple minor spywares taken out. rebooted in normal mode same shit. About 5 icons, and some spy sheriff program thats fucking everything up, I can go to add or remove programs and take it out, but the next time I reboot its there again. someone told me there's a way to set the hard drive back to original, could this work?

[Quiet_Riot]

if you have a restore disk, yes, but you will need to back up all your personal pictures/music/documents etc.

[Liquid_NRG]

1) Remove Norton. It's the saddest excuse for an anti-virus program out there. Along with McAfee. They both suck. I had Norton System Works 2005 and got viruses. I installed Anti-Vir (www.free-av) and have had no problems since.

2) I hate to say it buy Microsoft Anti-Spyware (http://www.microsoft.com/athome/security/spyware/software/default.mspx) works really well.

3) If all else fails, back up your music/movies/pics reformat and start fresh.

[Mike From The D]

can I back up stuff in safe mode?

[Liquid_NRG]

can I back up stuff in safe mode?

I think so.

[russian]

you cant burn cds in safe mood. at least not on my comp. but try going into safemode and uninstaling that spy sheriff shit

[Mike From The D]

that shit is unstoppable, I remove it and it keeps coming back. I'm going to give the hard drive to one if the IT guys here at work and have him handle it, i'm clueless.

[russian]

did you try to uninsall in safemode??

[Mike From The D]

I swear i've been fucking with this thing for like a week. I will do it in safe mode again just to make sure.

[Quiet_Riot]

get another hard drive and reinstall onto the new one, then attach your old one as a slave and transfer your important stuff across.

[jeffrok]

Sounds like the Blaster virus.. from about 2yrs ago.

[ScarSic]

What's the name of the virus/spyware program that keeps coming back after you try to remove it?

[Mike From The D]

Spy sheriff is the name of the monster that owns my comp, I did a google on it and there's tons of horror stories about it..................The IT guy at work told me to try Lava-soft Ad-ware SE. Anyone know if its good?

[russian]

Spy sheriff is the name of the monster that owns my comp, I did a google on it and theres tons of horror stories about it..................The IT guy at work told me to try Lava-soft Ad-ware SE. Anyone know if its good?
yea ad-wares all right, but have you treid this. much more better than adware.

http://www.freewebs.com/arabianknight_47/removevirusesnow.htm

[Mike From The D]

You think I can run it in safe mode though?

[JordanSauce]

Adaware was AWSOME for me for a couple months. Then it shit the bed, some virus owned it and it would even let me run adaware even if i reinstalled it.

[Quiet_Riot]

You think I can run it in safe mode though?


yeah you can.

get spybot: search and detroy too and run them both. sometimes there's a discrepancy between them, so one will find adwares that the other wont.

[russian]

you can run it in safe mode. but you cant instal in safe mode. so instal it. go into safemode. uninstal spy shariff. do that first. and then run all the scans you got.

[Mike From The D]

I won't be able to install, every time I log on in reg mode, the spy sheriff shuts the comp down in about 30 seconds.

[russian]

Go Into Safe Mode... And Uninstall It...

take a screen shot. so we can at least know whats going on...

[Sageth]

If it keeps starting up, it might be in the startup section of the registry. You're computer's pretty fucked right now, so as long as you don't delete anything, this should be fine:

Boot into safe mode and go to Start->Run and type "regedit"

Navigate to:
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entcontrolset\run

Post back anything that you see in there (if you can screenshot it, that would be best)

[Quiet_Riot]

to stop it shutting down, click start >> run >> type "shutdown -a" (without quotes)

[jeffrok]

Spy sheriff is the name of the monster that owns my comp, I did a google on it and there's tons of horror stories about it..................The IT guy at work told me to try Lava-soft Ad-ware SE. Anyone know if its good?

Adaware is good, and so is MS Antispyware.. I had problems with Spybot doing TOO GOOD of a job cleaning my PC, actually removing files that Windows needs to operate Internet Explorer. Luckily I had Firefox on my PC and was able to find a fix, but since that day, I stay away from Spybot.

[Mike From The D]

Ok, nobody shoot me, but how do you take a screen shot?..............hey if I knew anything about computers I wouldn't be asking you guys for help.

[Sageth]

The simplest way is to press the "Print Screen" button on the top right-hand side of the keyboard (just above home, end, delete, etc.

Then go into something like Paint and then paste it (CTRL+V) and then save it as a picture.

[Caveman]

I dunno how to stop the virus, but I do know how to stop the machine from shutting down.

Start>Run, type "cmd" and hit enter. Then in the next window that opens type "shutdown -a".

[russian]

dude have you at least tried uninstalling spy sherif in safe mode??

[Mike From The D]

^^ Yes a few times, but it pops right back in normal mode.

[russian]

can you get us a screen shot. a few if possible...

[Mike From The D]

I'll be fucking with it this weekend, i'll try to do the screen shots.