I think I got this virus from Internet Download Manager program. Symptoms are: Task manager disabled Regedit disabled Not able to connect to the internet (like in games etc, but not in the browser) Not able to install anything Disabled antivirus and firewall
Well luckily I am here.... All you gotta do is run Combofix and it will get rid of this virsus, which is a Vundo virus. HERE is the link to ComboFix from Bleeping Computer THEN you need to run Malware-Bytes Anit-Malware to make sure its gone. its free and its right here... HERE
I have ComboFix, it won't run, I have MalwareBytes, It scans but when I remove the virus, it just returns back.
You might have gotten yourself into a lot of trouble... I still don't see how people get these kind of viruses. If you really wanna play it safe I'd reformat
Try this. Download Malwarebytes from the site, but rename the installer to something different, like... 'Chicken'. Whenever you're going to save it to your C:/, rename it to something completely different. Like chicken. Some viruses scan for known anti-virus things and block them from opening. Changing the name of it usually works pretty well, and I've saved a few of my friends computers that way.
Try loading up safe mode with networking, and then run combofix and mbam. 1.Hold F8 while starting up your computer to select safe mode. 2.When you are in safe mode try logging into the administrator account, instead of the one you are using currently. (It might not matter) 3.Run combofix and mbam.
You do Safe Mode W/NEtworking load up into Admin account. You do this because the virus is user based. the infected files will be hidden in the user folder of whoever you log into, make sure you set viewing system files on as the Vundo virus disables it. Then you will need to get autoruns from MS/SI by googling it. run it and delete any suspicious items that show up next run combofix, and you should be good to go
I go to Safe mode with networking and it reboots. I'm lucky because it's not a keylogger, it just disables my games and messengers, but not browser.
NUmbers READ my post lol. you HAVE to either log into admin account to clean this OR make a new user account. Then you need to run combofix. it is USER BASED. It runs locally off your user account profile. Trust me, i known what im talking about