Help with virus.spyware - Printable Version
-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: Help with virus.spyware (/showthread.php?tid=39843)
Help with virus.spyware by user35870 on 03-09-2005 at 04:10 PM
help i haven't been able to removed a virus that keeps on adding its self to the process menu
what it does is:
it closes microsoft anispware and mcafee scirty centre
won't let me open the control+alt+delte menu
and if i type anivirus in on google it closes the brower
and it won't let me open regedit but lets me open msconfig
some of the process names are : msmbw.exe, formatsys .exe
please help
RE: Help with virus.spyware by Mike on 03-09-2005 at 04:14 PM
Try booting in Safe Mode and then run anti-virus and anti-spyware programs.
To do this:
1) Restart your computer.
2) Before the screen with the windows logo and a progress bar appears, press F8.
3) Choose "Safe Mode" and press enter
RE: Help with virus.spyware by user27089 on 03-09-2005 at 04:41 PM
sounds like w32.pinfi to me, clear your hosts file of everything apart from the help information and local host (and the ip), and you should be able to access the sites that you want, this worked for me. Then download avg antivirus, and run that, deleting all instances pretty much, then re-download all of the drivers that you need, its a lot of hastle, but theres no way of healing it, it drives itself into the *.exe's and you can't do anything about it other than delete it...
RE: Help with virus.spyware by user13774 on 03-09-2005 at 04:54 PM
It's much easier. You got the new Serflog.A (a.k.a. W32/Crog.worm) virus (formatsys.exe and msmbw.exe are part of it).
Download the removal tool by Symantec:
http://securityresponse.symantec.com/avcenter/FixSflog.exe
MIRROR (if the virus disabled that site): http://www.virushelp.nl/download/fixsflog.exe
Edit:
I'm reading the symantec site about the virus and it's pretty nasty 
. It does exactly the things you said: It terminates all sorts of anti virus and anti spyware programs and processes and it adds serveral file to your hosts file . More info
RE: Help with virus.spyware by absorbation on 03-09-2005 at 05:41 PM
Remember to rename the removal tool because the virus may stop it working.
RE: Help with virus.spyware by user13774 on 03-10-2005 at 07:27 AM
No Absorbation 
.
Don't worry about that. How can the virus maker know how symantec is gonna call the removaltool BEFORE it is even released... 
RE: Help with virus.spyware by absorbation on 03-10-2005 at 07:51 PM
It does seem silly but some buropia varients have stopped the tool from working proberly. I read it on another post. Anywayz this anit bropia so ur probably right. 
RE: Help with virus.spyware by user35870 on 03-12-2005 at 07:18 PM
thanks everyone one for the help but i just reformatted every thing was messed up 
but i had some problems with the restore disks but all working good now