raze Posted July 16, 2009 ID:99437 Share Posted July 16, 2009 hello, i am new to this issue and this forum at all...i have Malwarebytes find the Rogue.Unvirex registry entries, two of them but once i erase them wit MB the machine (XP Pro SP2) shuts down by itself.this happened before , but ive tried several other Malware killers and may be something changed since, however now the machine does not shut down any more, but the issue remains after reboot.Only MB find them, puts them into Q and then they are back again.should i try in safe mode?btw searching the web results in a big mess of what is a threat and what is a threat killer, all is very messy - i dont get the posts here regarding Unvirex- it seems to be a malware killer, or it claims to be one while on the other hand installing bad stuff - whats going on? Link to post Share on other sites More sharing options...
raze Posted July 16, 2009 Author ID:99442 Share Posted July 16, 2009 hello, i am new to this issue and this forum at all...i have Malwarebytes find the Rogue.Unvirex registry entries, two of them but once i erase them wit MB the machine (XP Pro SP2) shuts down by itself.this happened before , but ive tried several other Malware killers and may be something changed since, however now the machine does not shut down any more, but the issue remains after reboot.Only MB find them, puts them into Q and then they are back again.should i try in safe mode?btw searching the web results in a big mess of what is a threat and what is a threat killer, all is very messy - i dont get the posts here regarding Unvirex- it seems to be a malware killer, or it claims to be one while on the other hand installing bad stuff - whats going on? here the Q: Link to post Share on other sites More sharing options...
nosirrah Posted July 16, 2009 ID:99469 Share Posted July 16, 2009 Download , unzip and run the file attached to this post . A file called copy will appear on your desktop . Zip and attach this file to your next post .copy.zipcopy.zip Link to post Share on other sites More sharing options...
raze Posted July 17, 2009 Author ID:99697 Share Posted July 17, 2009 i am sorry for the double post, was about to find the edit button.. when i start copy.bat, it shows the blue DOS window for a millisecond, but does not generate a file.can you tell why? Link to post Share on other sites More sharing options...
nosirrah Posted July 17, 2009 ID:99713 Share Posted July 17, 2009 Try this one , run it from your desktop and the export should drop onto the desktop .copy.zipcopy.zip Link to post Share on other sites More sharing options...
raze Posted July 17, 2009 Author ID:99724 Share Posted July 17, 2009 im sorry, here the window stays a bit longer , say half a second, but no file generated tried a few times Link to post Share on other sites More sharing options...
nosirrah Posted July 17, 2009 ID:99736 Share Posted July 17, 2009 The box for a second is completely normal , it is only collecting the key in question .I am going to get regular support for you , I wish I had more free time here but I have far to much on my plate already . Link to post Share on other sites More sharing options...
raze Posted July 17, 2009 Author ID:99771 Share Posted July 17, 2009 oh my God, no prob -dont get hurried because of this - thanks anywaya pity that copy.dat didnt generateif so i am going to see if a backup from May will have the issue as well, if not, i Link to post Share on other sites More sharing options...
GT500 Posted July 17, 2009 ID:99780 Share Posted July 17, 2009 Please download ComboFix from the link below, save it on your desktop, run it, and attach the log to a reply:http://download.bleepingcomputer.com/sUBs/ComboFix.exe Link to post Share on other sites More sharing options...
raze Posted July 17, 2009 Author ID:99826 Share Posted July 17, 2009 hello, thanks for your supportcombofix asked to shut down my ESET NOD 32 Virusscanner, but i couldnt get it to close, in taskmanager it came back to live again and again. combofix says it will do its job anyway with my own risk. Just in case it was of any interest.so heres the combiFix log, its in German, so if theres something to translate for you ill be there ComboFix.txtComboFix.txt Link to post Share on other sites More sharing options...
raze Posted July 18, 2009 Author ID:100223 Share Posted July 18, 2009 edit:i assume its ok -didnt think of the German version -i had Combofix already here, but never had used it so i took this one.i hope it does not really disturb your examination - otherwise i could repeat the procedure Link to post Share on other sites More sharing options...
raze Posted July 24, 2009 Author ID:101960 Share Posted July 24, 2009 PS: MB does not erase the entries ! it says "no action taken" i described otherwise, so in case of importance...is there a command i can tell MB to erase them? Link to post Share on other sites More sharing options...
raze Posted January 7, 2010 Author ID:180896 Share Posted January 7, 2010 half a year later: i dont know what happened after this. May be i had demanded too much. Now that we are in 2010 i still have the two Rogue.Unvirex on my system - we got friends in meantime !Happy new year!who ever might read this at all Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now