Author Topic: i think i have a virus - ransom still,  (Read 100013 times)

0 Members and 1 Guest are viewing this topic.

true indian

  • Guest
Re: i think i have a virus - ransom still,
« Reply #15 on: February 28, 2012, 06:02:19 PM »
just keep the aswmbr attachment intact


deleting the enteries in roguekiller is safe....then save the log and attach it

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #16 on: February 28, 2012, 06:03:25 PM »
u need to take actions and then attach the remaining logs...

ah so when it detechs the 2 problems (the rogue killer scan) i can delete what it finds?   ok, cool, *pops off to do it, then il reboot and come back


thank you  :D

true indian

  • Guest
Re: i think i have a virus - ransom still,
« Reply #17 on: February 28, 2012, 06:03:58 PM »
I have notified essexboy....

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #18 on: February 28, 2012, 06:33:42 PM »
I have notified essexboy....


thank you  ;D, what iv done is edelete from rogue killer, rebooted, uninstalled 4.8 avast! rebooted, and then trying to install the latest avast! which is including google chrome which is taking forever,  ::)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: i think i have a virus - ransom still,
« Reply #19 on: February 28, 2012, 08:57:25 PM »
Quote
Description = IRQARB : le BIOS ACP ne contient pas un IRQ pour le périphérique dans
 le connecteur PCI 6, fonction 0.  Contactez le fabricant de votre ordinateur pour
 une assistance technique.
Quote
Description = IRQARB: the ACP BIOS does not contain an IRQ for the device in
the PCI 6, function 0 connector. Contact the manufacturer of your computer for
technical assistance

This is part of the problem.

I think the first thing to do is  totally uninstall Avast 4 and replace it with Avast 7
Then totally uninstall MBAM and get a new copy

To your desktop download the following programmes :
aswClear http://www.avast.com/uninstall-utility
Avast 7 http://files.avast.com/iavs5x/avast_free_antivirus_setup.exe
MBAMClean http://www.malwarebytes.org/mbam-clean.exe
MBAM http://www.techspot.com/downloads/4716-malwarebytes-anti-malware.html

Disconnect from the internet and then go to control panel > programs and features
Uninstall MBAM
Uninstall Avast

Let the system reboot as required

Then boot to safe mode by rebooting the computer and presiing F8
At the menu select safe mode

Run aswClear
Run MBAM cleaner

Reboot to normal mode and install Avast 7
After the reboot then install MBAM

Having done that then update windows to SP1

Then let me know what problems you are still having.  If at any stage you hit a snag then let me know and I will walk you through it

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #20 on: February 29, 2012, 09:28:48 AM »
Hi everyone ;D

well the problem is now is that i have had to restore the pc again because i got in a panic waiting for what essexboy may say, and afraid i could wait no longer not having antivirus, but i think i will still have the same problem, but i am in the process of using the windows update.


i will have to download those programs again if i need them (roguekiller, etc) at the moment the rubbish antivirus (norton) that came with pc is on the pc but the shield is off. 


shall i start again or do what my instincs tell me, and uninstall norton, reboot, try installing avast 7 again? if so, i will have to look to where to download it safely, as i have no antivirus protecting me. the version i have that refused to work is i think version 5.   Then i have 4.8 but 4.8 refuses to update but have not tried today but am tempted to after typing this.


the problem with attaching the logs is that sometimes errors or logs were not being created as logs and so i had to use screen capture, and the jpegs were too huge and so i had to try and capture partial areas of the entire page and break it up, to attach it due to attachment limit here. (if that makes sense)


thank you all for helping me and your patients  :)

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #21 on: February 29, 2012, 09:31:57 AM »
ooooooooow i forgot to mention that i tried using the microsoft (FixIt) facility yesterday evening..............i did not understand it.

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: i think i have a virus - ransom still,
« Reply #22 on: February 29, 2012, 10:08:21 AM »
Why are you running microsoft fixit? after deleting norton you will be required to run the norton removal tool which you can find here http://singularlabs.com/uninstallers/security-software/ read the info first then run the tool to rid your system of remnants before installing avast.

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #23 on: February 29, 2012, 10:54:35 AM »
Quote
Description = IRQARB : le BIOS ACP ne contient pas un IRQ pour le périphérique dans
 le connecteur PCI 6, fonction 0.  Contactez le fabricant de votre ordinateur pour
 une assistance technique.
Quote
Description = IRQARB: the ACP BIOS does not contain an IRQ for the device in
the PCI 6, function 0 connector. Contact the manufacturer of your computer for
technical assistance

This is part of the problem.  i do not know what to do about this problem  :-\



I think the first thing to do is  totally uninstall Avast 4 and replace it with Avast 7
Then totally uninstall MBAM and get a new copy - iv restored pc this morning, and downloading as i type everything from your thread to help identify the probkem and i thought i would attach the logs again?

To your desktop download the following programmes :
aswClear http://www.avast.com/uninstall-utility
Avast 7 http://files.avast.com/iavs5x/avast_free_antivirus_setup.exe
MBAMClean http://www.malwarebytes.org/mbam-clean.exe
MBAM http://www.techspot.com/downloads/4716-malwarebytes-anti-malware.html

Disconnect from the internet and then go to control panel > programs and features
Uninstall MBAM
Uninstall Avast

Let the system reboot as required

Then boot to safe mode by rebooting the computer and presiing F8
At the menu select safe mode

Run aswClear
Run MBAM cleaner

Reboot to normal mode and install Avast 7
After the reboot then install MBAM

Having done that then update windows to SP1 - windows update is running at this very moment and has 91/92 updates to install at the moment........

Then let me know what problems you are still having.  If at any stage you hit a snag then let me know and I will walk you through it
   - thank you for helping me :D   

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #24 on: February 29, 2012, 11:10:30 AM »
Why are you running microsoft fixit? after deleting norton you will be required to run the norton removal tool which you can find here http://singularlabs.com/uninstallers/security-software/ read the info first then run the tool to rid your system of remnants before installing avast.

because i suspected that windows has been corrupted and i could have deleted a vital core part of windows using the ccleaner because after being infected with the Ransom virus, which seems to live in the Prefetch&provisional section of windows, i asked ccleaner to clean in those areas, but not delete, but while it was cleaning on friday i think, it found an item called,  softeware distribution, and i thought it was a virus and so deleted it...........i do not know how to make it better now.  it could be why i have trouble opening setup files and updating softeware.  whenever i update anything, the function is being blocked. hence why i have restored the pc again this morning and using windows update to update pc, but also uninstalling norton, but cant reboot system yet, because of windows update being 64% completed.


i thought windows fix it could help me, but i have never used it before, and have no idea what it does, but i no longer have it due to the restore.  :)

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #25 on: February 29, 2012, 12:06:32 PM »
these logs are of today before rebooting to fully get rid of norton antivirus and to get the 91 windows updates installed.   The extras, shows errors still and i do not understand why when i have restored the system again.  ???

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #26 on: February 29, 2012, 12:14:00 PM »
these two logs include any modified files that have happened recently

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: i think i have a virus - ransom still,
« Reply #27 on: February 29, 2012, 12:25:03 PM »
Just wait for Essexboy now as he'll come on later tonight, late morning for you i think, about 4 hours time.

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #28 on: February 29, 2012, 01:45:34 PM »
got an error messege when trying to load the norton uninstaller utility. maybe i need to reboot the machine again before trying it?   I am trying to download the other programs like roguekiller etc from the other thread by essexboy at the moment.

sweetalmond2010

  • Guest
Re: i think i have a virus - ransom still,
« Reply #29 on: February 29, 2012, 01:49:51 PM »
oh my goodness!!!!!!!!!! the OTL program has a virus!!!  well that is what it looks like to me, but i do not have very much pc knowledge, should i panic yet?