System Repair Virus

rafa05

Got a really nasty virus. When I start up get this bogus virus or hdd scanner program. Cannot access files and start menu not working. Tried safe mode but cannot open the start menu, system recovery not working. icons and Windows explorer are so messed up that I cannot see anything. Tried F8 at start up and then ran malwarebytes from dos and removed some viruses but problem still there. I think it is the windows restore virus.

theidiots

anyway you can get rkill.exe to run on your computer?
It will kill all processes bar windows ones so you can then download malwares anti malware and then remove the viruses.

You can also download Kapersky rescue disk

https://support.kaspersky.com/viruses/rescuedisk

which will run a scan from a bootable cd or usb stick.

rafa05

theidiots wrote: »

anyway you can get rkill.exe to run on your computer?
It will kill all processes bar windows ones so you can then download malwares anti malware and then remove the viruses.

You can also download Kapersky rescue disk

https://support.kaspersky.com/viruses/rescuedisk

which will run a scan from a bootable cd or usb stick.

Hi thanks for your reply, no tried rkill but it is impossible to do anything in safe or normal node. I looked at the Kapersky rescue disk will give that a go thanks

rafa05

theidiots wrote: »

anyway you can get rkill.exe to run on your computer?
It will kill all processes bar windows ones so you can then download malwares anti malware and then remove the viruses.

You can also download Kapersky rescue disk

https://support.kaspersky.com/viruses/rescuedisk

which will run a scan from a bootable cd or usb stick.

Hi thanks for your reply, no tried rkill but it is impossible to do anything in safe or normal node. I looked at the Kapersky rescue disk will give that a go thanks

Fysh

Things you can try:

• boot a bartpe disc and use this to load the system and user registry hives to check for malicious stuff running on startup, and delete it where necessary
• Boot a WinPE 2.0 disc (similar to bartpe but instead of a full desktop it gets you a Vista/7 style command line environment from which to attempt repairs, including options like running the System File Checker in offline mode)
• (This is a longshot, but what the hell) Use Sysinternals Autoruns (you may need to rename the executable file to get it to run) to check for and disable image hijacks that prevent you from using other system cleanup tools.
• Attempt an online system verification with sfc /scannow at the command prompt (if you can open it)
• Use something like the F-Secure Rescue CD to do an offline scan

If none of that makes you any progress, I'd strongly recommend a clean reinstall - it's possible to spend tens of hours trying to clean up an infected system without success.

Capt'n Midnight

moved