Vista Internet Security 2011, another one!

Reply Subscribe

Thread Tools

Search this Thread

Mar 15, 2011 | 11:21 AM

Scooby Soon!

Thread Starter

Scooby Regular

Joined: Sep 2002

Posts: 2,551

Likes: 0

Vista Internet Security 2011, another one!

Another one of these pieces of crap on a work laptop

looks trickier to get rid of than the last one I posted about a week a go, this computer is only used specifically for ebay never any other sites so definitely come from there, scumbags!

Mar 15, 2011 | 12:32 PM

hutton_d

Guest

Posts: n/a

Had the 'XP' version the other day. Malwarebytes zapped it. But it also changed the file association for exe files which I had to repair first! I think it's the same malware, it just changes it's name depending on the OS.

Dave

Mar 15, 2011 | 02:48 PM

Scooby Soon!

Thread Starter

Scooby Regular

Joined: Sep 2002

Posts: 2,551

Likes: 0

this one is a lot harder to get rid of, it comes up in safe mode over and over again. All browsers are blocked had to leave it for now and have another look tonight.... it won't let malware bytes run or install.

Mar 15, 2011 | 02:50 PM

jura11

Scooby Regular

iTrader: (7)

Joined: Apr 2010

Posts: 10,523

Likes: 1

Try Combofix,download or if you have second PC download on them...

Jura

Mar 15, 2011 | 09:01 PM

hutton_d

Guest

Posts: n/a

Quote:

Originally Posted by Scooby Soon!

Forgot that. I tried safe mode also and you're right - the bleddy thing kept popping up.

OK. Firstly, get task manager up (CNTL/alt/delete) and check the processes running. One of them will be the malware (mine was called uek.exe or similar. Apparently it'll be different on different systems). Kill the one you think it is.
Not installing: probably what happened to mine - it changes the file association so Windows doesn't know what to do with an exe file ... doh, stupid Windose .....

Go to this web site ... http://www.dougknox.com/xp/file_assoc.htm ... and download the exe one. Run it (probably need a reboot) and then install malwarebytes. Update and run (AFTER ensuring you've zapped the problem process - I also 'searched' - tick 'hidden files' - for the uek.exe and deleted it from whereever I found it). Make sure you trick 'complete scan' or whatever the option is. Better safe than sorry.

Dave