unwanted program
#1
23 Aug 2009 @ 20:41
rtrg
Send private message to this user
Member
A software program that calls itself, "ADVANCED VIRUS REMOVER" is ITSELF a virus that installed itself unwanted by me on my GATEWAY. The results are that any page I choose from the search results page is redirected to any other page at random. I can still use the address bar. I searched a way to remove it using my SONY and came across a site that claims to have a removal tool to be downloaded to remove this program. The issue is that "G" is so unpredictable that I do not think I could download the program even if I could find it on "G". The site in question is www.2-safe.com. When I entered WWW.ADVANCED VIRUS REMOVER.com into the address bar, not knowing it was NOT a legitimate site, 2-safe appeared with a link page that allowed me to download this removal program. The same technique on "G" brings me to random unrelated pages. Does anyone know how I can use "G" to download this or any program to remove this ADVANCED virus program. The program has hijacked my screen saver and locked me out of certain activities. I ran all my protection programs to no avail. In the past the only choice was to reload the OS and start from scratch. Not something I wish to do again. Too many $s. Is there a way someone could send me the program as an email attachment? My email is still working, so far. I need HELP! Thank you. System Restore does not function either.
#2
23 Aug 2009 @ 21:17
ddp
Moderator
moved to correct forum as not an all other topics issue. did you run spybot search & destroy in safe & normal modes? did you check to see in msconfig\startup if that malware which you have is there?
#3
23 Aug 2009 @ 22:35
Answer to your second question is no. Spybot did not work. SPY DOCTOR DID find it by name but it is $S to remove it. Nothing else works including system restore. My friend will reload the OS, and then I will need to reload everything else.
#4
23 Aug 2009 @ 22:55
ddp
Moderator
did spy doctor tell you were it was located? do you or friend know how to use regedit?
#5
24 Aug 2009 @ 0:59
jony218
Senior Member
Once you reload windows. Get "returnil" it's a free virtual software. Anytime your on the internet "enable" returnil. Nothing will defeat this program. I recommend this software to everyone especially if you use windows Internet explorer. I'm using it right now, doesn't slow down your computer.
Also download the free "macrium reflect" and make an image backup of your c: partition. It takes about 10 minutes to make on a new OS. This way you never have to make a "clean install" of windows. At most you will spend 20 minutes to restore the image.
This way next time you get infected (which will happen if you are using Internet explorer) it will be as simple as "rebooting" if your using returnil or restoring an image if you have a backup to get rid of the problem.
Also download the free "macrium reflect" and make an image backup of your c: partition. It takes about 10 minutes to make on a new OS. This way you never have to make a "clean install" of windows. At most you will spend 20 minutes to restore the image.
This way next time you get infected (which will happen if you are using Internet explorer) it will be as simple as "rebooting" if your using returnil or restoring an image if you have a backup to get rid of the problem.
#6
24 Aug 2009 @ 10:13
According to Bleeping Computer, the free MalwareBytes should remove that
http://www.bleepingcomputer.com/virus-re...d-virus-remover
Download the free version, update and scan. It should flag the files and then remove.
http://www.malwarebytes.org/
http://www.bleepingcomputer.com/virus-re...d-virus-remover
Download the free version, update and scan. It should flag the files and then remove.
http://www.malwarebytes.org/
#7
26 Aug 2009 @ 23:08
BTW malwarebytes may not work if you do not change the name of the .exe file contained in the program files folder for that program. It does not work sometimes b/c of the viruses it combats. It doesn't matter what you change that file name to either. Go ahead and try it right off the bat though. If it does then disregard my remark. If it doesn't try this. If it still doesn't work, use safe mode and run the program. Post the log file if possible too... Good luck
PS Malwarebytes saved two systems I've troubleshooted before from reformatting, so I have every confidence in it.
PS Malwarebytes saved two systems I've troubleshooted before from reformatting, so I have every confidence in it.
"Our species is intelligent enough to create the ability to do something, and socially handicapped enough to prevent ourselves from ever actually attempting it."
ASUS P5LD2-VM Motherboard
Intel Pentium D 3.2 GHz dual core OC 3.38GHz(5%) w/ Zalman heatsink and fan
5 fans total
3 GB dual channel RAM @ 667mhz
1 DVDRW drive (IDE)
Saphire ATI Radeon HD 4650 512 mb PCIe 2.0 16x (OC 630MHz CPU, 715MHz memory)
4 HDDs (320 GB SATA WD caviar blue w/ Win 7 Ultimate, 250 GB PATA Seagate, 1 TB WD Caviar Black, and 80GB WD Caviar SE)
BFG tech ATX 12V 2.2 550 watt modular PSU
ASUS P5LD2-VM Motherboard
Intel Pentium D 3.2 GHz dual core OC 3.38GHz(5%) w/ Zalman heatsink and fan
5 fans total
3 GB dual channel RAM @ 667mhz
1 DVDRW drive (IDE)
Saphire ATI Radeon HD 4650 512 mb PCIe 2.0 16x (OC 630MHz CPU, 715MHz memory)
4 HDDs (320 GB SATA WD caviar blue w/ Win 7 Ultimate, 250 GB PATA Seagate, 1 TB WD Caviar Black, and 80GB WD Caviar SE)
BFG tech ATX 12V 2.2 550 watt modular PSU
#8
27 Aug 2009 @ 18:28
Thanks for the tips guys. I already gave the tower to my friend to reload the OS. This approach always works. Wheh I get it back I will load the software you reccomended.
Share this
