PDA

View Full Version : Antivir Solutions Pro


FoxCash
Aug 12, 2010, 03:51 PM
I was first hit by this virus, malware, or whatever it is a couple of weeks ago. I read various forums and websites to help me get rid of it.I started with ending the Tssd.exe in Task Manager. I downloaded and ran Malwarebytes it found part of the Antivir. I then downloaded and ran Spybot search & destroy and it seemed to have found the rest of it. Rebooted my computer and all was back to normal.

Except now I had a permissions popup saying "Ask.com" is asking for permission to continue. I clicked canceled and this pop up came up every 15-20 minutes. I just figured I could live with it and ignore it since then AntiVir was gone.

The problem I believe came from when I used IE to go on MSN Games. I never use IE except for this one time. I haven't used it since.

Yesterday, the antivir solutions pro came back. I restarted my computer, attempted to go into safe mode but it just froze at the Loading screen. So I restarted it in normal mode, got to task manager fast enough and looked for the Tssd.exe, but it wasn't there. So I began ending the process of things that didn't look right. I keep ending the process on something that looks like "hycvneky" (not exact letters but it did start with the H). It seemed to work and stopped the alerts.

I ran Spybot first, it found nothing but spyware from my browsers. I ran Malwarebytes after that and it found 2 parts of the Antivir. I restarted my computer but the Antivir is still there. I ran Malwarebytes again and it found nothing.

I'm out of options.

I also went into IE and disabled the Ask.com toolbar, restarted my computer and the ask.com popups still happen along with Antivir.

What do I do now? Because all the steps that I read about before have not done anything this time except for Malwarebytes removing part of it but it's still obviously on my computer somewhere.

Please help.

Stratmando
Aug 12, 2010, 03:56 PM
Try msconfig and check startup programs, shut some down.

InfoJunkie4Life
Aug 13, 2010, 04:56 PM
Run HijackThis (http://www.trendmicro.com/ftp/products/hijackthis/HijackThis.exe)

Click the scan now button, and then save the log and upload it here.

I will sort through it for you, and then that should disable any spyware/maleware on your system for the next reboot. Then you can run malewarebytes and combofix to clean up your system. If this fails, I would recommend a reinstall.