Virus problem, need some help

tehmarken

Well, I have some sort of virus or something, my internet conneciton has trickled to bytes/sec, and every anti-virus site is blocked. Using a normal search engine and clicking links causing random pages to load, I have to copy+paste every url.

It also prevented me from installing spybot, or allowing AVG to update it's definitions. Both gave errors of trying to connect to 127.0.0.1, which I know is the computer trying to connect to itself thing =\

So I ran a scan with AVG, but a lot of files came up Locked and it couldn't do anything to them.

I really need some help guys, I'm about ready to format my computer :x

TL DR

Do you have another computer? Disconnect the infected one from your network, install Spybot to a USB drive, and try to run it from safe mode.

tehmarken

well, i managed ot be able to access antivirus sites on my desktop briefly, bu with the internet coming in and out, usually at null speed.

Right now I'm on my laptop; I managed to get Avast installed, and have it running a boot scan right now, it's already found and deleted 5 trojans =\

I also got spybot up to date on this computer and slappe in on a thumbdrive. If Avast doesn't finish off my desktop, I'll hit it with this spybot and hope forthe best. =\

HarshLanguage

Those symptoms sound very familiar from my recent experience cleaning up my sister's laptop. If it's something like Virtumonde/Vundo, which is what she had, you'll notice that if you don't get every single part off, it will reinstall itself and spread again. You could be in for a long recovery, sorry.

Spybot and an AV program are a good start, but I don't think you'll be able to rely on just one anti-malware program. I used Malwarebyte's Anti-Malware in addition to Spybot (and AVG). I think I ran Adaware and Spysweeper at least once each, too, but MBAM seemed to have the best results in my case. (Plus Spysweeper is a trial and does a hard sell for upgrades.) The real trick was to run the utilities' scans and then reboot, repeating the scans until all is clear.

Honestly, if you have the ability to nuke the drive and start with a clean install, I'd recommend that as it could take less time and be less of a hassle. If you can't or don't want to do that, though, just settle in for some long scans and lots of restarts.

Edit: One more thing - make sure to update Windows and Java along the way. I know Vundo had at least one entry point via outdated Java VM installs. Oh, and Spybot's TeaTimer resident program is a big help too, to prevent the reinstallation of BHOs and such by the trojans.

shadydentist

With your computer as bad as it is, I'd recommend saving all your important data and reformatting.

Also, if you're running XP, make sure autorun is disabled, or you could be right back where you started.

Dark Shroud

Get all the programs you need installed & updated then disconnect it from the net. This lessons the re-infection during cleaning.