SPL

Windows Recovery Virus

4 posts in this topic

Hi,

I am new to the forum. My knowledge of computers is pretty average. I contracted the Windows Recovery Virus last night from a website i think. I knew it was dodgey right away, then ESET NOD32 blocked a website it tired to access. I ran a scan using a free ware Malwarebytes, It found 4 trojans and they were deleted and computer rebooted.

Thank icons went missing. Background was black. Windows Recovery Virus popped its ugly head up again. I couldn't update malwarebytes, i assumed the virus prevented me. So i dont a little google search and found other people had the same issue. I folled intructions on the BC windows recovery uninstal.

I ran RKill. Done a malwarebytes scan, i trojan found and deleted. Restarted PC and what do you know Windows Recovery was back again...

I found one of your members post and followed the instructions.

Ran ComboFix, followed the directions. Everything seems good now, Updated Malwarebytes. Currently doing scan now. Most of my desktop items are back up. The back ground is still a black screen, quick launch icons are still missing. Windows recovery hasm't popped up yet.

Is there something else i can do to make sure i am virus, spyware , malware free?

Im not too happy ESET nod32 didnt stop the attack. Im thinking of upgrading to the paid version of Malwarebytes.

I will post up the malware log when finish.

I would greatly appreciate if someone could help me make sure i am full virus free.

Thank you

Share this post


Link to post
Share on other sites
Ran ComboFix, followed the directions. Everything seems good now,

Please, never run C/Fix unless an expert thinks it suits your problem , if you read the directions it says to only use with expert help -

You need someone to diagnose the problem and read the results of the scan also -

Please only follow the directions below by daledoc1

Share this post


Link to post
Share on other sites

Hello and welcome, SPL:

[[EDIT: Sorry, noknojon -- it appears we hit "add reply" at the same moment!]]

Sorry to hear that your computer may be infected.

It sounds like you could use some help from the malware experts.

Alas, we do not work on malware removal in this particular part of the forum.

However, free, expert assistance can be found at the malware removal-HJT forum.

Here's how to proceed:

1. First, please go to THIS PAGE, print out, read and follow as many instructions as you can, skipping any you are unable to complete. (It sounds as if you have already started this process on your own.)

2. Then, please describe your computer's symptoms as best you can and post the requested MBAM and DDS logs by starting a new thread at the Malware Removal-HJT forum . (Use copy/paste to include the logs in your post, rather than attaching them.)

One of the authorized, trained experts will then assist you as soon as possible for one-on-one malware detection and removal.

When you post, please be sure to select Track This Topic & choose one of the email options, so that you will be notified when someone responds.

Please be patient and allow 24-48 hours before bumping your thread.

Other Support Options:

--- Alternatively, as a paying customer using MBAM PRO, you may wish instead to start a support ticket by contacting support at: support@malwarebytes.org; or

--- Premium, fee-based support options are available here.

NOTE: If you are a reseller, affiliate, technician, corporate, business, educational, government or non-profit customer then please contact corporate-support@malwarebytes.org and include full contact details along with your Reference # when you do, in order to ensure that you receive prompt assistance.

Also, please use the "Add Reply" button when replying here & at the other boards, so that it will be easier for everyone to follow the thread.

I hope this gets you started on cleaning up your system,

daledoc1

Share this post


Link to post
Share on other sites

Opps sorry,

I was trying to remove this virus myself, not wanting to bother anyone, i thought i would be able to do it.

Thanks for that link. I will do that now and post my results.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.