Exploit Rogue Scanner Infected My Computer

[ekkstra]

My infected computer is in real bad shape. All of a sudden my "security" system detects theres a virus and a whole different anti virus application pops up saying i should download it, trying to push me to pay. It infected everything, i mean EVERYTHING. I can't run a single application without it interrupting and telling me to buy buy buy. I managed to track it and i tried to delete but it needs the administration's permission which is me (I have vista) and i continue and it still can't delete it. I know its the Rogue Scanner. I can't delete anything or get on the internet or anything. I hope you guys can help Im on the other computer in the house posting this because its that bad.

I have AVG, thought it could protect but I guess not. I read that the Exploit Rogue Scanner makes additional virus to be a diversion for it to work behind the security systen and then acts like the new security system.

If you need anymore information I'll try to answer them.

Please help.

[JPMiller]

What you have is scareware...
There are multiple variations...
The most common fixes involve rebooting into safe mode, turning off system restore, and running Vipre, Malwarebytes, Super Antispyware, and CCleaner
The Vipre tool is found here...
Welcome Sunbelt Customers : Malwarebytes
The rest are here...
FileHippo.com - Download Free Software

[ekkstra]

Great downloading them now. One question what does turning off system restore do?

[JPMiller]

Some Spyware can hide in the system restore files and then reinstall themselves later...
turning it off deletes the old system restore points

[Cajunheat]

Follow exactly what JP suggested, then make sure to run an up to date virus scan after everything else is done. These nasty things will/do install viruses on to your system also.

[JLK03F150]

As a further suggestion, once you clean up the scareware you should uninstall AVG. It's broken now anyway. IMO AVG has gone downhill since ver 7.5, and it is completely incapable of stopping any real threats.

I have been happy with Avast on my laptop for years and I also like Avira AntiVir, which is installed on the desktops. I'd recommend either of those as a replacement for AVG.

[JPMiller]

I only use Avast when I cant use Microsoft Security Essentials...
Even if it isnt the hands down best AV AntiSpware available, it does an excellent job, integrates with windows, and isnt affected by windows updates like some other 3rd party apps can be..

[Cajunheat]

I agree 100% on AVG not being what it used to be. I also agree that Avira and Advast are both excellent products. MSE everyone raves about it, runs well on the Wife's computer but, runs like frozen molasses on mine so, I don't personally use it.

[ekkstra]

thanks guys for the help, Yeah about AVG not working i didnt think it was doing that much anyways. It would scan every now and then but I didnt feel like it was doing much good.

So Avast is good candidate for the replacement?

[ullysses]

I ran Vipre and Malwarebyte, after which it said I had to restart to complete the process. When booting back up it gets past the 'Windows' screen and just says "Missing operating system".

Not sure what to do now...

[pbaker]

Hello,I had my computer infected with Exploit Rogue so i downloaded Super Antivirus on my wifes computer,put it on a disk and installed it on mine,after running it ,it seemed to remove the virus but since then i am unable to connect to the enternet? any clue whats going on? thanks for any info on this matter.

[ullysses]

I've discovered that disconnecting my external (USB) hard drives allows my system to boot as usual. Only when it or any flash drive is connected do I get the "missing operating system" error mentioned in my last post. With no external connected I boot as usual and can then plug in the external and access it. If it's useful info, I too downloaded all the suggested programs to a flash drive and then opened and ran on the infected computer,

So, since I got booted I continued with the advice and ran SUPERAntiSpyware then CCleaner - and also cannot connect to the internet as the previous poster has experienced. I was connected before running these.

Any further help with either issue will be greatly appreciated - it appears you did get rid of my virus thank you very much!

[ullysses]

from Internet Explorer

Tools
Internet Options
Connections
LAN Settings
Automatically detect settings

'Use proxy server' was checked instead of 'Automatic configuration' - not sure why it was changed after running programs

Hope this helps pbaker

still not sure why it's trying to boot from hard drive - imagining something was changed in my 'Set-up', 'Start-up' 0r 'Boot menu' options - dunno, I just know enough to be dangerous - ha!

[JLK03F150]

The virus changes the IE setting, but it usually needs to be changed back manually. Glad you figured it out on your own.

You might want to enter BIOS and set the boot order - with your USB devices attached. Moving the C: drive above the USB drives should clear up the OS Missing issue.

[ullysses]

sorry, but when you say enter BIOS... is that F2, 8, 12 (Setup, Start, Boot) like I was thinking, or something else? Like I said... just enough to be dangerous.

THX

[ullysses]

Thanks for all the help - getting rid of the virus and all the crap that came with it. You folks are awesome - will definately keep this forum in the fav's!

PS - awesome cat JLK!

[JLK03F150]

I guess you know more than enough to be dangerous. Congrats on figuring out the boot order!

[kelseysecord]

I cannot open those links because it won't let me go online. If I were to reformat my computer would it get rid of these viruses. Are there other steps that I should take before doing this?


[QUOTE=JPMiller;3171280]What you have is scareware...
There are multiple variations...
The most common fixes involve rebooting into safe mode, turning off system restore, and running Vipre, Malwarebytes, Super Antispyware, and CCleaner
The Vipre tool is found here...
Welcome Sunbelt Customers : Malwarebytes
The rest are here...
FileHippo.com - Download Free Software[/QUOTE

[JPMiller]

try booting into "safemode with networking"
Reboot and tap F8 as its booting up.
that should bring up the options for booting.

Otherwise you need to access those links from a clean computer and transfer the files using a burned disk or usb memory thumbdrive