Jump to content

windows safty alerts cuasing crashes on removal attempt


ceth
 Share

Recommended Posts

hello iv been trying to remove a rouge antivirus that calls its self windows safety alerts

when ever i try to run a scan or take other steps to remove it my pc crashes

i dont know if this is cuase the malware is claiming a file is infcted and shuting it down or what

when i manage to run rkill before the malware starts up on reboot it dosnt stop it.

the same with malwarebyts if i get the scan runing the pc will crash a little bit after the malware loads up.

im posting this from my pcs safe mode right now

here are some of the scans requested from the "im infcted-what do i do now thread

the following scans were done from my windows safe mode i hope you can use them

DDS.text

DDS (Ver_09-12-01.01) - NTFSx86 NETWORK

Run by SYSTEM at 15:15:59.88 on Fri 02/19/2010

Internet Explorer: 8.0.6001.18882

Microsoft

Attach.rar

ark.rar

Link to post
Share on other sites

Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix.. Please visit HERE if you don't know how.. Please re-enable them back after performing all steps given..

Please download ComboFix by sUBs from HERE or HERE and save it to your Desktop.

During the download, rename Combofix to Combo-Fix as follows:

CF_download_FF.gif

CF_download_rename.gif

It is important you rename Combofix during the download, but not after.

**NOTE: If you are using Firefox, make sure that your download settings are as follows:

  • Tools->Options->Main tab
  • Set to "Always ask me where to Save the files".

After that, double-click and run Combo-Fix. Let it finish its job and post the log here

If ComboFix asked you to install Recovery Console, please do so.. It will be your best interest..

Note: DON'T do anything with your computer while ComboFix is running.. Let ComboFix finishes its job..

Link to post
Share on other sites

  • 2 weeks later...

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.