****. I screwed up really bad.

• Cucurbita wrote on 2010-05-22 06:11
  Well, I've somehow contracted a deadly trojan that is instantly defeating anything I try to load to remove it.
  
  "Antispyware Soft" has managed to somehow get on my computer. I know its a trojan because its way too obvious.
  
  1. It put itself on my computer instantly without me noticing.
  2. Its scanning hundreds of files which it claims to be viruses. I know these are not viruses.
  3. Its claiming to be a demo version and demands money for fixes.
  4. I cannot launch task manager, it will instantly shut off and I will get a msg that says its infected, and I must use Antispyware Soft to remove it. I cannot run my antivirus softwares, it will say the same thing. I cannot run the command prompt.
  
  So suggestions are welcome as I try my best to nuke this sunnova***** back to hell.
• Chiri wrote on 2010-05-22 06:12
  .-. I had something similar a while ago, I could run my spyware programs when I changed their file names.
  
  From google:
  [INDENT]Special notes on how to remove Antispyware Soft
  
  This parasite might block execution of executable programs, thus reboot and press F8 on boot. Choose safe mode with networking.
  
  If your internet is blocked, disable proxy server in your browser and clean up your hosts file. On IE, go to Tools -> Internet options -> Connection ->Lan Settings, and disable proxy.
  
  Download fresh Spyware Doctor install from http://www.2-viruses.com/downloads/spyware-remover.exe , rename it to iexplore.exe install, update and do a full scan. I suggest doing this from SAFE MODE WITH NETWORKING (press F8 on reboot, choose safe mode with networking). You have to update Spyware Doctor before performing FULL scan.
  
  If you can’t launch iexplore.exe, start task manager (ctrl+shift+esc) and start a new task. Enter full path to Spyware Doctor executable. This should pass Antispyware Soft.
  
  If this still fails , try to download Antispyware Soft remover software using this link [http://downloads.2-viruses.com/IEXPLORE.exe] (It does not block programs called iexplore.exe at the moment, thanks Shane for tip). It is critical to update this version, or it will fail.
  
  Also, you can try following:
  
  1. Stoping Antispyware Soft virus processes using task manager.
  2. If you can launch task manager, Choose File ->New Task. Type down the path to downloaded Spyware doctor or other anti-malware program executable.
  3. Try installing Spyware Doctor in safe mode.
  4. Try launching system restore in safe mode
  5. Using rkill to stop Antispyware Soft virus processes or combofix.
  6. Using msconfig process and stoping Antispyware Soft processes from starting, then rebooting your PC.
  
  Even if the signs of virus are gone after any of these steps, your PC is still infected and Antispyware Soft might reappear. You have to scan with good anti-spyware/malware tool to remove remains and fix your PC configuration to repair internet access.[/INDENT]
• Shironi wrote on 2010-05-22 06:14
  Safe mode ftw
• Cucurbita wrote on 2010-05-22 06:22
  Considered this all happened within the past hour, I did a search of newly created files in a given time frame.
  
  Found two executable files which cannot be deleted, sitting in an applications folder. Obviously its being protected from deletion because its running.
  Will run again in safe mode and try to delete it.
  
  Edit: Solved that problem. Like a bossu.
• Pocoyo wrote on 2010-05-22 07:22
  I had this problem before, If you get Desktop Security 2010 I would watch out because it is a trojan aswell, similar to the one you got.
• Taycat wrote on 2010-05-22 12:44
  Oh kita, you and your Touhou hentai....
• Osayidan wrote on 2010-05-22 14:38
  I would suggest configuring your system for easy nuking.
  
  4 partitions:
  
  C: = windows
  D: = page file
  E: = program files
  F: = all your crap
  
  If you have multiple physical drives then do the same but you have more flexibility on the number of drives for your stuff, and better performance by putting the page file on another one.
  
  You install all your apps to E: instead of the default C:\program files\ nonsense.
  You use the windows powertoys (i know thye have it for XP not sure vista/7) to move your desktop and mydocuments to directories on your F: partition.
  Configure everything like options in your applications, browser settings, all that.
  Make a disk image of C:.
  
  When something goes wrong, wipe C: by replacing it with the disk image.
  
  Takes 10 - 20 minutes depending on the size. Faster than a virus scan.
• Chihaya wrote on 2010-05-22 16:28
  When something like this pops up, i immediately jump into safe mode and attempt to do a system restore. If that doesn't work, I just store all my files into an external hard drive and reformat the comp =>
• Hiccup wrote on 2010-05-22 16:31

  Quote from Xiyamae;41365:

  Oh kita, you and your Touhou hentai....

  
  
  I was gonna say something like this 8D