Question:
Possible virus? urgently need help?
T A
2011-10-10 06:07:27 UTC
Hi there all, 2 days ago my computer started behaving oddly online and avg and mcAfee came up with a exploit black hole kit attack and blocked it. But ever since my computer is lagging so much and IE and all other programs are taking so long to load, it takes so long to open my documents or anything else, I have scanned with avg, mcAfee, spybot search and destroy and malware bytes anti malware but to no avail. Infected files have been removed and all scans coming up clean but keep getting black hole exploit attacks when going online and computer lag on and offline for all programs. I've read about viruses embedding deep in the system how can I find and remove this virus? I get a avg report saying black hole exploit blocked, and its coming from C\windows\svchost.exe is this related? Please help
Eight answers:
livewyre
2011-10-10 06:48:32 UTC
When i get this sort of problem with my PC's I download the latest version of macafee 'stinger', which is a stand-alone scanner - that usually finds any untoward activity - you can tweak the settings before you start in 'preferences'.

Failing that, I have also on a couple of occasions used the RKILL files from bleeping computer - they come in a variety of guises so that the virus doesn't block them - if one gets blocked, try another version... after that I would run all the usual maintenance, diskcheck, ccleaner, defrag etc.. to make sure everything is optimised.
2011-10-10 10:49:00 UTC
I see you've tried scanning with Malwarebytes' Anti-Malware already. In case it's become corrupted, uninstall it, and try this:



Firstly, boot your computer to the Safe Mode menu screen. You do this by repeatedly pressing F8 as soon as you boot up. Once there, use the arrow keys to highlight Safe Mode with Networking. Continue to boot from there, by pressing Enter.



If that's successful, download and run TDSSKiller.exe from Kaspersky Lab. It's tiny, and takes just a minute to run. It hunts down and kills a specific family of rootkits. Here's a link:



http://support.kaspersky.com/faq/?qid=208280684



Regardless of the results, download the free version of Malwarebytes' Anti-Malware. Install it, get updates and run a full scan (still in Safe Mode). Here's a link:



http://www.filehippo.com/download_malwarebytes_anti_malware/



After that, boot normally and run another full scan with MBAM. It will detect any malware that wasn’t running in Safe Mode.



TDSSKiller.exe can be deleted, and Malwarebytes' Anti-Malware can be easily uninstalled, should you wish to do so, but they may prove to be beneficial in the future.



Hope this helps.
Yogesh Khurana
2011-10-10 06:51:37 UTC
If your computer is infected with a virus, you'll want to remove it as quickly as possible. A fast way to check for viruses is to use an online scanner, such as the Microsoft Safety Scanner. The scanner is a free online service that helps you identify and remove viruses, clean up your hard disk, and generally improve your computer's performance.



If you're not sure whether your computer has a virus, see How can I tell if my computer has a virus? to check for some telltale signs. To try a different online scanner, follow the links to other companies that provide them on the Windows Security software providers webpage.



If you can connect to the Internet



If you can reach a website using your web browser, run an online scan.



To run the Microsoft Safety Scanner



Go to the Microsoft Safety Scanner webpage to download the scanner.



Click Download Now, and then follow the instructions on the screen.



If you can't connect to the Internet



If you can't get to the Microsoft Safety Scanner online, try restarting your computer in safe mode with networking enabled.



To restart in Safe Mode with networking enabled



Restart your computer.



When you see the computer manufacturer's logo, press and hold the F8 key.



On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking, and then press Enter.



Log on to your computer with a user account that has administrator rights.



Follow the steps above to run the Microsoft Safety Scanner.



For more information about different startup modes, see Start your computer in safe mode.



If you still can't access the Internet after restarting in safe mode, try resetting your Internet Explorer proxy settings. The following steps reset the proxy settings in the Windows‌ registry so that you can access the Internet again.



To reset Internet Explorer proxy settings



In Windows 7, click the Start button . In the search box, type run, and then, in the list of results, click Run.

-or-



In Windows Vista, click the Start button , and then click Run.

-or-



In Windows XP, click Start, and then click Run.



Copy and paste or type the following text in the Open box in the Run dialog box:



reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d 0 /f



Click OK.



In Windows 7, click the Start button . In the search box, type run, and then, in the list of results, click Run.

-or-



In Windows Vista, click the Start button , and then click Run.

-or-



In Windows XP, click Start, and then click Run.



Copy and paste or type the following text in the Open box in the Run dialog box:



reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /f



Click OK.



Restart Internet Explorer and then follow the steps listed previously to run the scanner.



Remove a virus manually



Sometimes a virus must be removed manually. This can become a technical process that you should only undertake if you have experience with the Windows registry and know how to view and delete system and program files in Windows.



First, identify the virus by name by running your antivirus program. If you don't have an antivirus program or if your program doesn't detect the virus, you might still be able to identify it by looking for clues about how it behaves. Write down the words in any messages it displays or, if you received the virus in email, write down the subject line or name of the file attached to the message. Then search an antivirus vendor's website for references to what you wrote down to try to find the name of the virus and instructions for how to remove it.



Recovery and prevention



After the virus is removed, you might need to reinstall some software or restore lost information. Doing regular backups on your files can help you avoid data loss if your computer becomes infected again. If you haven't kept backups in the past, we recommend that you start now.



To learn how to help protect your computer against viruses in the future, see How can I help protect my computer from viruses?

Was this helpful?
2011-10-10 06:10:17 UTC
Next time it goes up, put the message into Google. Usually, there are instructions for manually getting rid of the virus. If you want to do it now, your McAfee suite should have the logfiles with the messages on it.
Sly_Old_Mole
2011-10-10 06:32:08 UTC
avg and mcAfee came up with a exploit black hole kit attack - you can only run one AV - AVG or McAfee delete one.



When you have done this do a free online scan:



http://go.eset.com/us/online-scanner



Lets see if its a FP.
amsbaugh
2016-10-23 14:59:09 UTC
maximum trojan come from anti virus courses marketed on the internet. as quickly as you get carry of them they scouse borrow you very own infomation and then inform you to replace the virus protection you obtain
Duy Nguyen
2011-10-10 09:37:03 UTC
Whenever you think your computer is infected the first thing you should do is use Malwarebyte anti-malware



Download link:



malwarebytes.org
Kevin
2011-10-10 06:20:37 UTC
yes it is a virus


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Loading...