quick virus help: solved

[m0ds]

I have a bastard virus that auto blocks any attempt to visit an anti-virus software website.

Could someone do me a massive favour and supply me some direct download links, to exes or zips, not web-pages, for:

Avast anti-virus*
AVG 8 free
ZoneAlarm firewall

Many thanks

*This one seems to download a small file which then does that "in-setup" download shite, so if anyone knows of a different way to install it please let me know - cos that insetup downloading doesn't work.

[Clarvalon]

Try these: AVG, ZoneAlarm.

However, both are from CNet which may use per-session downloads to prevent hotlinking files this way.

[arj0n]

I use avira antivir personal free since avg is pretty heavy these days.
The shield of avira does a real good job, recommended.

[m0ds]

Thanks chaps

It may be the Conficker virus I have, and there's apparently a tool to "remove" it on CNet. But all that happened was it made my system worse, and was detected as a virus itself and removed!

The links all seem to work right now from you folks tho, so cheers for that! In all my experience, the only way to completely kill a virus is to find its root yourself - and I've exhausted all my registry options on that one, but I'll trying running these different anti virus things. Cheers again

[arj0n]

Might be needless to say, but run scanner(s) while in safemode
And oh, this removal tool should be able to do the job...

[Jim Reed]

Avast supplies an offline installer also, just scroll down on the download page and look for regional versions with their sizes listed on the right side. The offline installer is about 30 mb.

[Wyz]

I had luck with this tool once: RootkitRevealer (click)
The scanning took ages though.

[Evil]

Ugh, I had one of those anti-virus blocking viruses over the summer. It took me forever to remove the thing entirely. Best of luck to ya!

[m0ds]

So how did you do it Evil? Any memorable steps?

The most memorable step for me so far was: Regedit clear-up of things in the Run folder for Windows.
And ThreatFire kind of helped, but now I'm getting a User Init Logon fail after I type my password, and I have to CTRL ALT DEL to "run" explorer. LOL. Maybe I took something bad out of the regedit :/

But that obviously hasn't stopped all the background processes. Any idea where else they could be loading? Something is definitely still infecting my browser. Clicking links go through another URL. Now I think about it, f***, yes, I've had a similar thing before, but I never write the solutions down.

[Domino]

http://www.5starsupport.com/ipboard/index.php?s=&showtopic=15483&view=findpost&p=59820

Try and use ComboFix. Read the thread and do exactly what the instructions tell you to do. I had a very bad virus like you had and this helped.

But as stated, do it step by step as that thread shows.

I was finally able to get rid of my virus and then went with a paid anti-virus software, and my computer has been clean since then.

Good Luck.

[Shane 'ProgZmax' Stevens]

If you have the malware/virus I think you have, get superantispyware.  It worked for me ages ago.  And combofix alone probably won't work (it didn't for me).  You need to use it after the initial successful erase of the virus.  

[m0ds]

Thanks for all the help, this is pretty much solved now I believe! It was something called Dr WebCure that worked for me after doing some scans with ThreatFire.

[Evil]

Sorry about the delay in response, maybe I could have helped you!

IIRC, I ended up downloaded a really early version of AVG or Spybot or something, like a beta that's two or three editions behind the most recent. The virus was old enough, or the software had updated virus identification, and found it right away. At the time I only had what remained of a Norton demo I got with my laptop several years prior, so if you had at least one virus protection running, you should be fine. Hopefully that might help someone out in the future. I'm pretty sure I caught mine on a bad torrent that I was certain I desperately needed.  :