Need help removing "Virus Protector"

  • Thread starter Thread starter David
  • Start date Start date
D

David

My laptop has been taken over by some infection/virus/malware called "Virus
Protector". Upon booting a pop up appears counting and listing infections.

Have visited other forums, read directions on how to remove "Virus
Protector" scumware using Malwarebytes. Believe me, I want to follow the
directions fully but I am not able to get beyond the initial pop up screen of
Virus Protector that happens on each reboot. There is no control of my
computer available, all I can do is watch the infections pile up like mad!

I am using a Toshiba Qosmio running Windows XP

Booting into normal mode is no good.
Booting into safe mode is no good.
Booting into safe with networking mode is no good.

I did manage to boot into Safe with DOS prompt....cmd.exe screen that has
C:\Documents and Settings\DavidF>

This is hopeful, yes? What do I have to type in to get to a "restore point"?
I read somewhere that going to an earlier point in time when things where
operational would cure this trouble...or at least allow me access to my
computer to run some malware programs.

This program/virus or whatever it is seems to have taken over my computer
and sits there telling me how many infections I have while they, the
infections, compound exponentially.

Thanks in advance,
David
 
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
 
David said:
My laptop has been taken over by some infection/virus/malware called
"Virus
Protector". Upon booting a pop up appears counting and listing
infections.

Have visited other forums, read directions on how to remove "Virus
Protector" scumware using Malwarebytes. Believe me, I want to follow
the
directions fully but I am not able to get beyond the initial pop up
screen of
Virus Protector that happens on each reboot. There is no control of my
computer available, all I can do is watch the infections pile up like
mad!

I am using a Toshiba Qosmio running Windows XP

Booting into normal mode is no good.
Booting into safe mode is no good.
Booting into safe with networking mode is no good.

I did manage to boot into Safe with DOS prompt....cmd.exe screen that
has
C:\Documents and Settings\DavidF>

This is hopeful, yes? What do I have to type in to get to a "restore
point"?
I read somewhere that going to an earlier point in time when things
where
operational would cure this trouble...or at least allow me access to
my
computer to run some malware programs.

This program/virus or whatever it is seems to have taken over my
computer
and sits there telling me how many infections I have while they, the
infections, compound exponentially.
Click to expand...


I assume you are trying to follow the automatic removal instructions
here?
Remove Virus Protector (Uninstall Guide)
http://www.bleepingcomputer.com/virus-removal/remove-virus-protector

You may have a recently changed version of the malware that is not
allowing you to start the procedure.

Go here:
http://www.bleepingcomputer.com/virus-removal/remove-cleanup-antivirus

Scroll down to the "Automated Removal Instructions" but do this all from
Safe Mode with Networking as described in the article for Virus
Protector removal.

Download and run RKILL.COM *EXACTLY* as explained on the web page. If
you continue to have problems, download one of the renamed versions, as
explained on the web page.

Then download, update and run MBAM as explained on the original web page
for removing Virus Protector.

If that is successful, then follow ALL of the instructions posted in PA
Bear's reply in this thread...run all the scans he posted, and follow up
with a post of your logs in one of the forums he has linked in his
reply.
 
Back
Top