Question

Locked

Windows Problems

By roy.soumya123 ·
Please could anyone help. All day today my PC has been freezing a few minutes after startup. Sometimes, I strike it lucky and it stays on for a lot longer, but 8 times out of 10 it just freezes and I have to turn the PC off by holding the power button in.
I tried running a McAfee Virus scan and it kept closing, saying McAfee VirusScan - On Demand Scan has encountered a problem and needs to close. We are sorry for the inconvenience. The error signature stated: szAppName : mcods.exe szAppVer : 13.3.127.0 szModName : mvsscan.dll
szModVer : 13.3.130.0 offset : 00019fc0
Tried to use system restore and not even that works (I keep clicking next and nothing happens, it's as if i haven't clicked anything!).
Then I downloaded Malwarebytes' Anti-Malware. It installed but not running after install. I tried with changing the extension .exe also.
Then I downloaded Microsoft? Windows? Malicious Software Removal Tool. It is not even installing. I tried with changing the extension .exe also.
When I scan again with Mcafee, it finds 1 infection and removes but if I run the scan again it picks up the same virus. It is some 'HOOK' named virus.
Now I lost my restore points also. I can't even create restore points.
I do office work in my laptop. Please help me.
Thanks.
Roy

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Safe mode...

by tmalo627 In reply to Windows Problems

Try doing the virus scan with McAfee and Malwarebyte Anti-Malware in safe mode. To enter safe mode press the F8 key as your computer is booting up. If you see the Windows splash screen, you've missed it. There will should be a manufacturer's splash screen (Dell, HP, Sony...) when you first boot. That would be the time to press F8.

Hope this helps.

Collapse -

When Mbam still wont run

by IC-IT In reply to Safe mode...

Only change the name, not the extension; it still must be an exe file.
Change it to something like 1mbam.exe and run that (in Safe Mode).

Collapse -

Hijackthis

by Jay217 In reply to When Mbam still wont run

Running a hijackthis scan can give you a clue as to whats going on as well. There are a number of websites dedicated to deciphering the log files. http://www.hijackthis.de works well, it does expect German names for some files so it may give some false warnings, but they are pretty obvious.

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis

Collapse -

Safe Mode Issue

by roy.soumya123 In reply to Hijackthis

Hi,

Thank you all for your help. Sometimes my safe mode does not boot also.

Regards.
Roy

Collapse -

if you have spare computer then

by BizIntelligence In reply to Safe Mode Issue

plug hard disk into that. Scan it for viruses and also backup of data. But please be noted that backed up data can also have virus so be careful you have scanned it first.

If you don't have spare computer then make BartPE cd with antivirus and backup software(learn here how http://www.nu2.nu/pebuilder/) and boot it from that cd. Scan whole system and backup data.

Once you have data been backed up then you can format the system if problem still doesnt get resolved.

Good Luck !

Collapse -

If you can get into Safe Mode turn off System Restore

by Jacky Howe In reply to Windows Problems

Removing malware from System Restore points
To remove the malware, you must first disable System Restore, then scan the system with up-to-date antivirus software - allowing it to clean, delete, or quarantine any viruses found. After the system has been disinfected, you may then re-enable System Restore. The steps for disabling System Restore vary, depending on whether the default Start Menu or the Classic Start Menu is being used.

Default Start Menu XP
If using the default Start Menu, click Start | Control Panel | Performance and Maintenance | System. Select the System Restore tab and check "Turn off System Restore".

Classic Start Menu XP
If using the Classic Start Menu, click Start | Settings | Control Panel and double-click the System icon. Select the System Restore tab and check "Turn off System Restore".

Vista
Start, right mouse click Computer and select Properties. Select Advanced System Properties, click contine and then System Protection. Untick the box nect to Local Disk C: and click on Turn System Restore off.


After scanning the system and removing the offending malware, re-enable System Restore by repeating the steps, this time removing the check from "Turn off System Restore".


Click Start, Run type msconfig and press Enter.

Now if you have the Configuration Utility open.
Configure selective startup options
In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.
Click to clear the Process SYSTEM.INI File check box.
Click to clear the Process WIN.INI File check box.
Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, save the settings and restart the System.
When the System is disinfected re-run the Configuration Utility and in the System Configuration Utility dialog box, click the General tab, and then click Normal Startup.

Restart again in Safe Mode to run ComboFix.

Download Combofix and rename the executable Combofix.exe to cfix.exe before running it.

http://www.combofix.org/


http://www.combofix.org/download.php

Edit: to add a bit

Collapse -

Problem Solved

by roy.soumya123 In reply to If you can get into Safe ...

Thank You all very very much. Combofix Worked for me. Only, I did not get the restore points. Anyway they were vanished during the infection in last stage. I am very happy now. You are the genious ones.
If you guys would be in PUNE,India. I would give you a party.

Regards.
Roy

Collapse -

We can still Party

by Jacky Howe In reply to Problem Solved

<) <) <)

<i>Keep us informed as to your progress if you require further assistance.</i>
<HR>
<i>If you think that any of the posts that have been made by all TechRepublic Members, have solved or contributed to solving the problem, please Mark them as <b>Helpful</b> so that others may benefit from the outcome. </i> :-bd
<HR>
<b>How do I rate the answers to my posted Question?</b>
Click on the answer. Click the Mark "Helpful" button displayed below the post. You may mark more than one answer as "Helpful."
The answers only have to be Helpful and don't necessarily have to be a definitive answer.

Edit: format

Back to Malware Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums