Viruses , my laptop is infected , need help

[peat moss]

No offense taken peat moss some of those could indeed give you false positives.
The only one I would really say is going to give you problems though is CA.I have great faith in KAV,Eset and Symantec.
I like the idea of the occasional reinstall but even that isn't a guarantee.If you are backing up files there is always the risk saving the one with the malware in it.

I'm glad you did n't take offence as I help friends all the time in tears trying to get back lil Billy's grade two pictures they had stored on that computer . He's 20 now but they sure wish they could keep them .

I'm such a softie that I usually try and save pic's and documents on a external hdd for them then formatt and put back . I would like to see the OP'S Hyjackthis log tho just to see what's leftover .

As I said great links that should be saved or stickyed .

[lynx]

With all due respect to the OP, since he doesn't know where his infection came from it is difficult to say that any other AV product would have dealt with this infection any better than NOD32. The fact that the OP couldn't launch the installer for KIS suggests that the virus is KIS aware. That in turn leads me to suspect that KIS would have had just as much trouble in detecting this infection.

A virus that can install itself as a root kit can evade detection from ANY antivirus software, even online scans if they've been written that way. They simply divert attempts to view anything that would reveal their presence and consequently they never get scanned. The only foolproof solution is to install the drive in an external case (eg USB) so it isn't present at boot time (because windows reads the boot sectors of ALL installed drives at bootup) and scan the drive while it is attached to a non-infected system.

I'm posting this not as support for NOD32, I'd be saying the same if the OP has been using KIS, NIS, AVG or whatever. I'm simply pointing out that casting doubt on one piece of software is no reason to assume that another piece of software would have fared better against one particular virus. There will always be viruses that slip the net otherwise detection rates would be constant at 100% and the arseholes that create these viruses would realise that their attempts were futile.

As an example of how these things can occur, I'll relate what happened to a friend of mine. While he was away on holiday a new virus became active (one that exploited a vulnerability in Microsoft's LSASS.EXE program). On his return he started his pc, and immediately went to download the latest AV updates and Windows Update critical updates. Too late, within 30 seconds of going on the net his system had been infected. And since LSASS.EXE has access to anything in the computer, it installed itself as a root kit and the updates to his AV software couldn't spot it. Fortunately the effects of this particular virus were well documented and I was able to stop it in it's tracks fairly easily. Removing the infection took several hours though.

I can't remember which AV software he was using at the time (I suspect it was NAV) but it isn't really relevant. It was a new virus and it slipped the net. That will always happen to someone no matter what AV is in use.

The only sensible solution to deciding which software to use is to look at independent tests. No-one here is qualified to say that one piece of software is a more effective product than any other. All we can do here is relate how our experience of using our systems has been with a particular package installed. I won't use NIS or McAfee because I like to have sufficient resources left to actually do some work. I used to use AVG, but dropped it because I'll decide what software runs on my pc, not them. I tried a few others and decided on ESS, but that was simply down to personal preference of how it works. If a virus sneaks through I won't be suddenly blaming the people at Eset, I'll be thinking how stupid I was in not being more careful about that dodgy software I installed.

[peat moss]

Good point lynx, my rule of thumb is I don't trust a Virus program that can't stop its own cracks or key gen.'s

So I only use ESS or KIS ,only problem is I spend most of my waking time looking for said cracks , serials or key gen's .

[outfromdeep]

I spend most of my waking time looking for said cracks , serials or key gen's .

if u know where exactly to search then may be u won't waste that much amount of time. I got KIS key still working over past 3 months

[peat moss]

That's just it my little friend , it only seems to work for a few months . I put a good program on a few friends computers and bang the phone starts ringing .......


"Peat , you schmuck this program doesn't update anymore" .

[outfromdeep]

That's just it my little friend , it only seems to work for a few months . I put a good program on a few friends computers and bang the phone starts ringing .......


"Peat , you schmuck this program doesn't update anymore" .

Yes my friend that's true. But I will let u know when my key will work for 1 yr. Still no blacklist problem arised

[maverick_andy]

@peatmoss,
If u want KIS key then PMe

[peat moss]

Thank you very much Andy , but find ESS works very well . I thought about paying for a security solution and would be hard pressed to decide between KIS or ESS . Their both that good .

[maverick_andy]

Thank you very much Andy , but find ESS works very well . I thought about paying for a security solution and would be hard pressed to decide between KIS or ESS . Their both that good .

pal,why to pay, when no antivirus are ideal to find viruses. Use net effectively mate to find right keys at right spot. BTW I just downloaded AVG Internet Security 8.0+AIO keygen in TorrentBytes. It works gr8 for standalone,server editions

[saulin]

Well I think there are many ways to get infected and is very possible that the infection could have happened before even installing NOD32. Anyways I just started using NOD32 and I heard so many good things about it and it seems like a pretty solid AV. Very neat indeed. I have it on 2 laptops. I also just installed Kaspersky AV on 2 computers and it also looks pretty kick ass. I used to use it years ago and I always liked it.

Anyways if you want to clean this biatch.

I would boot into safe mode with networking and simply download and run Smitfraudfix and Combofix, go through your add/remove programs and see if there is spyware that needs to be removed. Then run one or 2 of those online scanners posted.

If you have registry permission errors or policy errors you need to use dial-a-fix to fix these errors. It will show you the policies and restrictions that are on your system and you can remove them with it.

Then see how is running. At this point it should be pretty clean, you should be able to reinstall the AV software and do some other scan but at this point I would just use process explorer and autoruns. In fact I would use these 2 right after going to safe mode but I know what I'm doing and what I'm looking for. You kind of need to know what you are looking for when using these 2 programs so don't use them if you don't know what files are legit windows files or your system won't boot again.