Help, I have a virus at work...

**Wellsy** · 05-06-2009, 10:31 PM

My computer started acting up just after I downloaded an update for Adobe 9.1 today.
All my internet searches started getting re directed to other sites. It froze my computer more than once throughout the day. I have SpyBot but it won't allow me to open it. I have tried a few Antivirus programs like Malwarebytes and Superantivirus but the virus won't allow me to open them. I tried also to perform a system restore, but I couldn't get past the date entered to restore to. AVG did manage to work for a bit and I find out that the virus is called Win 32 Cryptor.

Anyone that has had experience with this nasty, can you maybe give me some ideas as to how to oust it please...

**Wraith** · 05-06-2009, 11:04 PM

Originally Posted by Wellsy

My computer started acting up just after I downloaded an update for Adobe 9.1 today.
All my internet searches started getting re directed to other sites. It froze my computer more than once throughout the day. I have SpyBot but it won't allow me to open it. I have tried a few Antivirus programs like Malwarebytes and Superantivirus but the virus won't allow me to open them. I tried also to perform a system restore, but I couldn't get past the date entered to restore to. AVG did manage to work for a bit and I find out that the virus is called Win 32 Cryptor.

Anyone that has had experience with this nasty, can you maybe give me some ideas as to how to oust it please...

Wellsy... this one starts out small but gets nasty the longer it stays on your system because it "invites" other viruses, root kits and trojans to come join in.

The most efficient tool for removal is malwarebytes and you can get it directly from their site (free!) http:www.malwarebytes.org

However! I suggest you try and download it using another computer and copy the install file onto a USB Memory stick instead of using the infected computer. (If you don't have this option you can try downloading direct, but depending on whatever other viruses you may have contracted, they may block the scanner from working properly)

Start your infected computer up in "Safe Mode" (you'll need to insert the USB stick before you turn it on) and then copy the program onto the infected computer and install it.

Run your scan in "Safe Mode" as well and it should handle the cleanup properly.

The one caveat is if one of the viruses invited to the party is Win32/Heur you may have permanently damaged .exe files.

Let me know if you need any help with this sorta thing... I handle these on a daily basis.

**Wellsy** · 05-06-2009, 11:13 PM

Thanks for the suggestions Doug...I will keep you informed...

**Old School** · 05-06-2009, 11:27 PM

Go to this site Wellsy. This does a virus scan and repair online from their end. It worked for me once.
Gerry
http://us.trendmicro.com/us/home/ind...trendmicro.com

**tmaivs** · 05-06-2009, 11:50 PM

Hey man, that sucks, I'd suggest as a last resort, save all your work on a different disk and just reformat, it's a pain but its your safe bet. Thats if none of those options those guys listed works.

**Wellsy** · 05-07-2009, 12:05 AM

Originally Posted by Mopar2009

Go to this site Wellsy. This does a virus scan and repair online from their end. It worked for me once.
Gerry
http://us.trendmicro.com/us/home/ind...trendmicro.com

Thanks for the link Gerry...I will put your suggestion on the list...

Originally Posted by tmaivs

Hey man, that sucks, I'd suggest as a last resort, save all your work on a different disk and just reformat, it's a pain but its your safe bet. Thats if none of those options those guys listed works.

Thanks Tyler...I am inches away from pressing that big red button!!!!

Attachment 17045

**PNY KLR** · 05-07-2009, 12:58 AM

fix it the welder way, big hammers and a torch. just kidding Ron sorry to hear about that.

**Wellsy** · 05-07-2009, 01:14 AM

Originally Posted by PNY KLR

fix it the welder way, big hammers and a torch. just kidding Ron sorry to hear about that.

If I don't get it fixed...your hired Tom!!!

**Gucci300C** · 05-07-2009, 02:52 AM

its funny you mention that ron i had that happen on my lap top lucky for me i have a 1 terabyte external drive as a back up woot!

**J Field** · 05-07-2009, 01:44 PM

Ron, I think Doug explained the best way

**Meathammer** · 05-07-2009, 02:11 PM

Another option is to build a live CD on another good PC using something like BartPE or a dead simple version of that is ReatogoPE (www.reatogo.de). There are many different plug-ins available for BartPE as well as all iterations of it that would allow you to build a bootable WinPE type environment with functioning AV software. If you can't do it, maybe somebody else can build one for you. Besides a complete format/rebuild, it may be the only way to completely rid yourself of such a problem.

**MAGUIRE** · 05-07-2009, 03:07 PM

I have a solution for ya Ron, buy a Mac

P.S hope you get your computer back up and running soon

**Wraith** · 05-07-2009, 04:45 PM

Ron's situation is worse than he thought....

Turns out his MBT has bad sectors in it and the drive is unable to read at startup consistently. I ran a repair and recovered a couple hundred sectors, but it's dying an ugly one. Time for major recovery work!

**Wellsy** · 05-07-2009, 08:46 PM

Originally Posted by Wraith

Ron's situation is worse than he thought....

Turns out his MBT has bad sectors in it and the drive is unable to read at startup consistently. I ran a repair and recovered a couple hundred sectors, but it's dying an ugly one. Time for major recovery work!

Thanks for coming by doc...er...Doug, nothing like telling it to me strait, now waiting for the re and re.
Rg-300c (Ron) came by as well for a peek at the system just after Doug left, and concurred with him..."yup your most definitely f***ed".
Thanks for the support boys...damn I like this club!!! The BCLX rocks...