Prev: Extremely Slow Windows Explorer
Next: Save Restore Point to specific date
From: kevinla on 19 May 2010 03:26
had the Antivirus soft virus on my computer and was able to remove it (most
of it anyway) using Malwarebytes.

http://www.bleepingcomputer.com/virus-removal/remove-antivirus-soft

I am having some issues after Antivirus soft virus is removed:

1> IE 8 does not work without a proxyserver. When I go into options and "Use
a proxy server for your LAN", it does work. I would rather use a proxy server.


2>> In order to remove the folder, I needed to go into msconfig/Startup and
disable the virus before it started so I could run Malwarebytes. After
running Malwarebytes, the file was still in the Startup list.

The file is:

qvxdpoktssd. The command is located in the folder "lctahartv" which is
located in the Apllication Data folder . I deleted this folder, but it is
still listed on the Startup in msconfig.

The location is: SOFTWARE\Mircrosoft\Windows\current version\run. I go into
regedit, but can not find it.

When I start Windows now, I receive the following message:

"You have used the System Configuration Utility to make changes to the way
Windows Starts.

The System Configuration Utility is currently in Diagnostic or Selective
Startup mode, causing this message to be displayed and the utility to run
every time Windows Starts.

Choose the Normal Startup mode on the General tab to start Windows normally."

Another issue is with Microsoft Security Essentails. When I try to update
it, I get the following error:

0x80072efe.

It is unable to update.




From: PA Bear [MS MVP] on 19 May 2010 09:05
Can I install Microsoft Security Essentials [or any other
anti-virus/anti-spyware application] to clean up my already-infected
computer?
http://social.answers.microsoft.com/Forums/en-US/msescan/thread/87058857-d181-4019-a723-efd9a49d9275

You have much more work to do!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.



kevinla wrote:
> had the Antivirus soft virus on my computer and was able to remove it
> (most
> of it anyway) using Malwarebytes.
>
> http://www.bleepingcomputer.com/virus-removal/remove-antivirus-soft
>
> I am having some issues after Antivirus soft virus is removed:
>
> 1> IE 8 does not work without a proxyserver. When I go into options and
> "Use
> a proxy server for your LAN", it does work. I would rather use a proxy
> server.
>
>
> 2>> In order to remove the folder, I needed to go into msconfig/Startup
> and
> disable the virus before it started so I could run Malwarebytes. After
> running Malwarebytes, the file was still in the Startup list.
>
> The file is:
>
> qvxdpoktssd. The command is located in the folder "lctahartv" which is
> located in the Apllication Data folder . I deleted this folder, but it is
> still listed on the Startup in msconfig.
>
> The location is: SOFTWARE\Mircrosoft\Windows\current version\run. I go
> into
> regedit, but can not find it.
>
> When I start Windows now, I receive the following message:
>
> "You have used the System Configuration Utility to make changes to the way
> Windows Starts.
>
> The System Configuration Utility is currently in Diagnostic or Selective
> Startup mode, causing this message to be displayed and the utility to run
> every time Windows Starts.
>
> Choose the Normal Startup mode on the General tab to start Windows
> normally."
>
> Another issue is with Microsoft Security Essentails. When I try to update
> it, I get the following error:
>
> 0x80072efe.
>
> It is unable to update.

 | 
Pages: 1
Prev: Extremely Slow Windows Explorer
Next: Save Restore Point to specific date