Shoutbox

My step brother got a virus blocking all internet connections from coming out of his computer. The virus stops all browser windows showing anything but the spyware/adware's website, as well, it closes the Windows task manager before I can end the process. I need a quick and easy way of getting rid of this virus. Otherwise, I'm backing his stuff up and I'm reformating, which I don't really want to have to do.

Please help.

you can use "tasklist" and "taskkill /f /im" to kill processes. also, the virus will not start in safemode, so you can use the taskmanager then.

quote:

---

Originally posted by ShawnZ
you can use "tasklist" and "taskkill /f /im" to kill processes. also, the virus will not start in safemode, so you can use the taskmanager then.

---

Tried safemode. It seems to have worked but I'll try tasklist and taskill /f /im if it's still there. (I used msconfig to stop it from starting for now).
Edit: Turns out safemode saved us. I also got rid of the rest of the startup crap while I was at it. Everything works great. Thanks for the tasklist tip Shawnz.

Use an alternate task manager. Many are available and it might allow you to stop it from starting.

Also, use CCleaner to find where the virus is based and delete it from the start up before you delete it.

Already did all that, but with windows task manager in safe mode, see above edit Thanks both of you.

quote:

---

Originally posted by .Lou
(I used msconfig to stop it from starting for now).

---

good for temporary measures.

But don't use msconfig for changes which need to be permanent. It does not list all the possible startup entries there are (in fact it only lists an extreme little fraction of it) and above all, Windows will use an alternative boot sequence to start up when you altered stuff in msconfig.

This boot sequence is easly switched back by accident and the things you wanted deleted will be put back! If you must use a program to alter the registry, then use a program like AutoRuns (this program will list ALL the startup entries that exist in Windows; far, waaaay far more than msconfig (or any other program)).

See:
CookieRevised's reply to "Removing items from msconfig"
CookieRevised's reply to "Start-up Programs"

--------------------

For general (but detailed) instructions when you encounter a virus:
CookieRevised's reply to "Help!!!!!!!!!!!!!!!"

additional (but still important) notes:
CookieRevised's reply to "I have a virus, but which?"
CookieRevised's reply to "Virus and dodgy dialer won't budge"