Replies

Another thing, you run rkill then you run MBAM or SAS or your antivirus. IF you have a problem running this in normal mode, you reboot and it will run in safe mode too

peace

The problem you were having is the new malware that is coming out comes with a trojan that blocks many of the common tools we use to remove bugs including MBAM, SAS and many of the antivirus. There is a tool out there called RKILL that will stop the trojan so you can run your tools. Here is a link to the bleeping computer site that tells about what RKILL does.
http://www.bleepingcomputer.com/forums/topic308364.html
RKILL is free and safe. It will not harm your computer.

peace

Interesting, but I came home Friday and my wife had the AVG bug on her laptop. I closed the popup with taskmanager, ran rkill – it found two trojans, then ran malwarebytes and rebooted the laptop. AVAST did a boot up scan and found nothing.

the trojan prevents malwarebytes, SAS and the antivirus from removing the package.

My wife was on a site and a scam AVG warning came up. She closed her laptop and waited for me to get home. I used ctrl alt delete and removed the popup which was similar to the one you got. Then I ran RKILL to make sure no trojan came with it. There were 2. It deleted them. Then I ran malwarebytes and removed the rest of the infections. Next I rebooted after turning on the boot scan that comes with AVASt and the laptop was clean.

RKILL is safe and free. Why don’t you run it and let us know if there is a trojan. It posts a log when it finishes.

http://www.bleepingcomputer.com/download/anti-virus/rkill
I know I didn’t think there was one on the laptop.

I don’t know for sure, but it sounds like funweb puts a trojan to prevent its removal. In that case, RKILL will remove the trojan and then malwarebytes or SAS will get it. RKILL is completely safe, the bleeping computer site I link you to is safe and it gives you a log when it finishes. I just used it on my wifes computer to remove the AVG scam bug.
http://www.bleepingcomputer.com/download/anti-virus/rkill
Then your tools will work
Hope this helps

edit
also, look for accoona search assistant in your control panel. that is one of the names it goes by and you can uninstall it there.

I agree you should have an antivirus, but conceptually this product could make antivirus obsolete.
I use ESET NOD 32 to protect the OS, but now having used Sandboxie for about a month, its impressive.

It looks like what I am reading says zemana does not remove anything per the Wilders forum. It detects, it blocks, but it does not remove.
http://www.wilderssecurity.com/showthread/?t=250384&highlight=keylogger+removal
cutting edge = post
but there is a nice list of keylogger removal tools and excellent suggestions for other apps

Oh, thanks joe – root kits are commonly with them I am learning

Many excellent suggestions above.
Especially like the share your photos with picasa.
Another option is you can attach the photos to an email and send it to your self.
Then open the emails on your computer and you can save them there.

Thanks, but what do you think about setting up another admin account and deleting the infected one. Any Microsoft experts out there?

It should not if its compatible for the mobo, the mobo sees it on boot up and will go right to the OS. Its always safe and smart to back up before something like this, but it should just boot up.

It should just drop in the socket and run. That said, its a good time to replace the fan. You will want to clean out the heat sink and get some thermal paste to put between the new cpu and the heat sink. Make sure to check your mobo specs regarding the cpu. Some mobos will handle a max speed cpu and anything faster will not run or make a difference speed wise.

http://www.microsoft.com/windows/windows-7/get/upgrade-advisor.aspx

to make sure you can run Win 7

The longer the bug is out there, the more fixes become available.

Apparently the latest Ff is having a problem with the silverlight app and won’t play for netflix. Mozilla is aware and trying to fix that from what I am reading.

OK, just logged in to the site and see where they have been passed the last two tests. They had a fail on the test previous to those – so they have passed 3 of the last 4 and I don’t think they have been out much longer than that time frame.
Thanks for pointing that out. Still, its a new product and I don’t like to jump on the bandwagon until it has stood the test of time. Too much pimping by magazine writers looking for those big Microsoft advertising dollars.

As I look around the forum, I see a lot of questions regarding MSE and problems too.