Question:
Pretty Bad Virus, out of control, Need Help!?
Stacey
2010-01-17 14:55:56 UTC
I use Symantec Endpoint Protection.
In my Quarantine, I have 15 viruses, ect.
They are:
1 Trojan.Brisv.A!inf (type:quarantine)
4 Adware.Gen (type:quarantine) (2 in same location, other 2 in same location)
3 Backdoor.Trojan (type:backup) (all in the same location supposedly)
3 Infostealer.Lineage (type:backup) (2 in the same location, 1 otherwise)
1 Trojan.Wimad (type:backup)
2 Trojan Horse (type:one backup, one quarantine) (in different locations)

My Symantec can't remove these, I want to know how I can remove them, for good.

But that isn't my only problem. Right now, I'm in Safe Mode. I have to be, or I can't go online I guess.
I guess I could start off describing what happened.
I was online, just surfing around on sites like DeviantArt, Myspace, and Twitter. I was on Myspace when it happened. Some (fake ***) AntiVirus thing pops up and starts scanning my computer. Now, I've come across this before when a pop up tab does that ****, but I just X it out. This time it happened on my computer, not in the browser tabs. There was an icon in the taskbar that I couldn't right-click to get rid of it. I tried to access my real antivirus but it had a pop up saying it's been tampered with: The message said, Target:C:Program Files/Symantec/ Symantec Endpoint I didn't get the rest, But I gather that it must be Savui.exe because not only is the tamper alert popping up, but then disappearing, but another one is doing the same thing, but this one is from the fake antivirus thing, saying Savui.exe contains a virus or something, and it's pretty much stopping it from executing. That much I gather. So, so far I've got 2 pop ups that pop up then disappear and repeat.
I can't bring up task manager, because it disappears when I do, or wordpad either. Now, the other thing that was in the tamper alert pop up from my real antivirus protection was this: Actor Process: C:/Documents and Settings/Stacey/Local Settings/Application Data/ qxysyft/ tssnsys guard
I tried to find and delete it, but it wouldn't let me, and it was a ***** to find because of those pop-ups and the weird **** going on. I went in safe mode to find it, to delete it, and Local Settings wasn't there. So I hid everything, files and folders, then I set it back to show, basically. It was there, so I went straight to the qxsyft folder and deleted the whole thing. I'm not sure if I should've but let's just say I'm angry right now. Then I used CCleaner, scanned my Registry, and deleted 2 that were supposedly tied in with that tssnsys guard.
Just to be clear, my system restore is off, and has been for a while.
Someone tell me how to get rid of this annoying thing before I lose my mind T_T
Thanks,
Stacey
Three answers:
ilknur K
2010-01-17 15:46:53 UTC
The Best way to Remove all kind of Virus,Trojans,Malware,Spyware,

Worm,Pop Up Advertisements ,Hijack Web browser rootkit and all Rogue Fake

Anti-virus in you Computer is Restart You Computer Safe Mode with Networking



1. Log out and reboot your machine.



2. When the machine starts the reboot sequence, press the F8 key repeatedly.



3. Select Safe Mode with Networking from the resulting menu.



4. Login. If the malware has changed your password, try logging in as

Administrator. By default, Administrator has no password.



5. The machine will continue booting, but the Windows desktop will look different.



Then in The Safe With Networking .Download and Scan By Using Malwarebytes’ Anti-Malware http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap&cdlPid=10997763

Download and Scan By Using Super Anti-Spyware Press here http://www.superantispyware.com/



Download and Scan By using Norman Malware Cleaner Press here http://majorgeeks.com/downloadget.php?id=5450&file=1&evp=6980e63d4e482f0670e991265b3250e7



Download ATF is a new, freeware, temporary file cleaner for Windows, IE, Firefox and Opera with a simple, easy-to-use interface.



The main screen allows the user to either clean all temporary files, or select files for cleaning. The program also knows if Firefox and or Opera is being used, and gives the option of cleaning the temporary files associated with those applications.



ATF Cleaner provides the user with a window showing the total bytes freed upon completion. The program is small (36kb), quick to run and no installation required. to Download ATF Cleaner press this link http://majorgeeks.com/ATF_Cleaner_d4949.html



6. When you're finished Remove Virus, Malware, Trojan, Worm,

rogue

virus rootkit and

Spyware log out and reboot back into normal mode
?
2010-01-17 15:07:47 UTC
Download MalwareBytes AntiMalware and SuperAntiSpyware.

Update both and run both until you come up clean.

Some malware work in layers. Get rid of the first layer opens up level 2,just like an onion. So scan with both back and forth until nothing shows up.
2016-05-26 13:14:22 UTC
reinstall windows!


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Loading...