![]() |
|
![]() ![]() |
![]() |
![]()
Post
#21
|
|
Member ![]() Group: Advanced Members Posts: 154 Joined: 15-February 07 Member No.: 1,682 ![]() |
Ur doing it wrong. 1. Boot in safe mode. 2. REGEDIT 3. Find "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" & RunOnce and RunOnceEx 4. Remove virus entries. Do not remove valid entries. If you don't know the difference, try googling each process name or have a pro look at it. 5. Open windows explorer and delete all the virus files. There might be another place that has the Run key you'll need to clean up. I like to open windows explorer and sort it by date. I'll then drill down into any directory modified since the date I suspect the virus was installed. AV programs can only fix what they know about. It may take the AV company some time to create a fix for it. Man it would be great if virus removal were that easy!!! What about system restore information and rootkits? yup...and plenty of them run now in safe mode...and will add the entries back into the registry as fast as you can delete them |
|
|
![]()
Post
#22
|
|
Nothing says 'I love you.' like a box of Hydroshoks ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderators Posts: 5,284 Joined: 23-December 03 From: Granbury, TX Member No.: 4 ![]() |
Been off-line for a while. Thought it time for an update.
Machine finally got to the point it would no longer boot. Even in Safe Mode. Took the drive out and went to another machine Malwarebytes would hang about 15 minutes in re-install of Windows would hang about 1/2 way through Spinright 6.0 worked for almost 30 hours and was 2% complete At this point in time, I don;t know if the virus corrupted the boot sector, or the multiple hard crashes due to system lock corrupted a boot sector, or a combination of the two or I had a failing HD that made me think it was a virus the whole time. I lost a lot of data. Most noteably was activation codes for software I had installed and received via e-mail. I have now fixed that problem by saving them to a web-based e-mail account instead of a local account. What a PITA ... |
|
|
![]() ![]() |
Lo-Fi Version | Time is now: 31st May 2025 - 06:02 AM |