Had a virus

nomoney

nomoney

....
I got a nasty one last week. One that would kick me to an antivirus soft website to try to buy their software, blocked out the net, etc - it was a beyotch to remove. Had to install a rkill program just to be able to install a different anti spyware program that the virus didn't recognize or else it would just close it all down. Anywho - got that all taken care of but I still get a "Just In Time Debugging" box that constantly pops up. It wants me to make microsoft script editor my default debugging program for the runtime error that keeps ocurring in my script. I've disabled the debugger in the internet settings - it just keeps popping up.

I've googled on what the deal with this thing is (since I didnt' have it until I got slammed). It suggests the disabling which I've already done and that if it still pops up its because of some adware I must still have on my comp. Which is telling me that virus isn't all the way gone, it must still have parts in hiding somewhere.

I am running yet another ad-ware scan with a different program as one of them is saying I'm all clear. So we'll see what the deal with that is.

I am no where close to being computer savvy. I just did a double check to see if there were any unknown programs under the control panel and it says I have Visual C++ ( I don't remember having this before but I might have who knows), I know this is a programming software - being that I'm not wanting to make websites or video games anytime soon ; is this something that I NEED to have? or is it something I gained from the virus? If I delete it will it eff up my comp?
 
Pete

Pete

Repete
Sounds nasty and I can't answer your questions but I was wondering what anti-virus you were running that let it into your machine in the first place.
 
nomoney

nomoney

....
Pete said:
Sounds nasty and I can't answer your questions but I was wondering what anti-virus you were running that let it into your machine in the first place.
Click to expand...


I had avg the 8. whatever version. I now have avg 9. Its a brand new virus as of the end of feb/ start of march that is also a keylogger and it has a self defense mech that recognizes certain anti virus logs and instantly shuts it down. The r kill I had came as a random file name and had to try 4 different versions before that was even allowed to run (in safe mode). Couldn't even open the task manager. I got it by trying to find a manual online for our copier. I clicked on a website andavg popped up saying this site is affected. I freaked and just shut down the page and didn't do what avg told me to do. Ran a quick scan and it came back clean. (which after reading is its game plan; it doesn't actualy start working until you reboot) Which I did the next day when I turned my comp on and was instantly slammed.

After more reading I guess I"m good with keeping the visual c++ but I'm still at a loss for this debugging box I keep getting. The adware scan is going on 30 min and I still haven't found anything. UGHH
 
Last edited:
GWguy

GWguy

*
Sound like one of the AntiVirus series, 09, XP2010, etc... If you don't have ALL of the updated Windows patches AND an antivirus scanner that actively scans websites BEFORE you hit the link, it can infect you just by visiting a website.

My dad's computer was running slow, so he removed his antivirus protection. Got some performance back, but got nailed by this virus. Took me all weekend to completely remove it.
 
GWguy

GWguy

*
nomoney said:
After more reading I guess I"m good with keeping the visual c++ but I'm still at a loss for this debugging box I keep getting. The adware scan is going on 30 min and I still haven't found anything. UGHH
Click to expand...

The unfortunate truth is that once you get something like this, there are things in the OS that will not be the same again. More often than not, I see the icons in the system tray disappear. There may be a wipe/reload in your future.
 
nomoney

nomoney

....
GWguy said:
The unfortunate truth is that once you get something like this, there are things in the OS that will not be the same again. More often than not, I see the icons in the system tray disappear. There may be a wipe/reload in your future.
Click to expand...


Lovely. I'm afraid to even back up my files now in case I back up any of this crap. Dumb question - it can't bed itself into word/ exl files can it?
 
GWguy

GWguy

*
nomoney said:
Lovely. I'm afraid to even back up my files now in case I back up any of this crap. Dumb question - it can't bed itself into word/ exl files can it?
Click to expand...

Not this particular virus, but others could possibly. Get a clean drive and copy all your stuff over to it. Then after your computer is completely reloaded, all patches applied, and antivirus installed and fully updated, connect the drive and immediately do a full scan of your files on the external drive.
 
TurboK9

TurboK9

New Member
GWguy said:
The unfortunate truth is that once you get something like this, there are things in the OS that will not be the same again. More often than not, I see the icons in the system tray disappear. There may be a wipe/reload in your future.
Click to expand...

So far, as long as your do NOT click in the window, anywhere, including the 'X', it won't infect you... you have to ctrl-alt-delete and end task on all instances of IE when it initially pops up. Once you click on it's window, just once, exen in teh 'x' to close it, you've actually given it permission to install itself....

Trouble is most people just instinctively hit the 'x' not realizing the whole friggin' thing is a link, LOL.

My wife and kids have given me this as a gift a couple times even though I keep 'splaining. Ooopsy, but at least I've gotten good at removing all related keys from my registry and 'un-relating' av.exe to all my executables... LOL. %* I say!
 
F

frogman123

New Member
Ok. go online and google what virus you had. It sounds like scareware which is made to get you to purchase the creators software to get rid of it. They hide files in the registry but there are EASY walkthroughs that show you where to find them. Do not do a clean install- no point. Was it "Windows security police" or something like that? It's easier to find the individual dll/exe files and delete them- there arent that many- maybe take you 20minutes.
 
nomoney

nomoney

....
frogman123 said:
Ok. go online and google what virus you had. It sounds like scareware which is made to get you to purchase the creators software to get rid of it. They hide files in the registry but there are EASY walkthroughs that show you where to find them. Do not do a clean install- no point. Was it "Windows security police" or something like that? It's easier to find the individual dll/exe files and delete them- there arent that many- maybe take you 20minutes.
Click to expand...


:lol: already been there done that. This was more then a scareware one. I already know what it was. Went through task man and registry keys manually deleting files as per the directions all last week. (after I kicked the blocker that wouldn't even allow task manager or explorer to open in the first place) I think I just got something on my third scan today and now the debugger hasn't popped back up so keep your fingers crossed.
 
H

High-Def

New Member
nomoney said:
I got a nasty one last week. One that would kick me to an antivirus soft website to try to buy their software, blocked out the net, etc - it was a beyotch to remove. Had to install a rkill program just to be able to install a different anti spyware program that the virus didn't recognize or else it would just close it all down. Anywho - got that all taken care of but I still get a "Just In Time Debugging" box that constantly pops up. It wants me to make microsoft script editor my default debugging program for the runtime error that keeps ocurring in my script. I've disabled the debugger in the internet settings - it just keeps popping up.

I've googled on what the deal with this thing is (since I didnt' have it until I got slammed). It suggests the disabling which I've already done and that if it still pops up its because of some adware I must still have on my comp. Which is telling me that virus isn't all the way gone, it must still have parts in hiding somewhere.

I am running yet another ad-ware scan with a different program as one of them is saying I'm all clear. So we'll see what the deal with that is.

I am no where close to being computer savvy. I just did a double check to see if there were any unknown programs under the control panel and it says I have Visual C++ ( I don't remember having this before but I might have who knows), I know this is a programming software - being that I'm not wanting to make websites or video games anytime soon ; is this something that I NEED to have? or is it something I gained from the virus? If I delete it will it eff up my comp?
Click to expand...

I had the same virus! I know 7 other people that had it too, we all had to slick our hard drives in order to remove it. It sucks! Sorry you got the virus too! I lost a ton of pictures
 
bobbyb

bobbyb

New Member
Do you know the actual name of the virus? We can down load the removal tool and have it on hand just in case.
 
muttdog

muttdog

New Member
I wonder if this is the same junk I have on my comp. Mcaffee, adaware, windows update will not work, says no internet connection or page not found. Try to download spybot and get redirect to different web sites. Got most of my files backed up on an external hard drive, so I may wipe and reinstall if I cant find a fix soon.
 
N

nuttshack

New Member
Sounds like it... Here is a link to download Rkill with a few extensions. This thing is a pain in the you know. IT does prevent use of .exe files.

It will try to stop Rkill as well but it you keep double clicking and DO NOT click ok when it tells you it blocked Rkill (I forget the actual message).

Once it stops it DO NOT REBOOT!!! You will just start it all over again. RKILL just disables the rogueware.

I have attached a link that has clean up procedures. This is a ploy to get you to spend money for a fake anti-virus software, nothing more.






Remove Internet Security 2010 For XP/Vista
 
rpexie

rpexie

.:Georgia Peach:.
If youre talking about the "Anti-Virus System Pro" malware Ive gotten it twice (and no I dont look at porn or download music/movies so I dont know how!)
The first time I got it I was able to remove it with Malwarebytes (its free)but the second time I tried everything and the virus blocked everything but its own site. I tried renaming things, manually removing files... nothing worked. I had to wipe and reinstall everything.
It defintely sucked and put me in a terrible mood. I have Symantec and it did nothing to block it even when I managed to run a scan while my comp was being attacked it said "nothing detected". Sorry to hear you got it, try Malwarebytes otherwise youre probably screwed as well.:frown:
 
N

nuttshack

New Member
The thing is an SOB. RKILL will disable it. From ther you need to disable the proxy setting on IE. Then manually delete the files off you PC. I got it and I was not surfing porn either well at least that time LOL!!

All the thing does is Disable the use of .EXE files and prevents your browser from accessing anything but it's site to buy there program. From there it shuts itself down and is nothing more than a waste of money.

This article talks about it in more than just technical detail.

How To Remove Antivirus System PRO, Antivirus System PRO Removal Instructions
 
You must log in or register to reply here.
Top