I got struck by a nasty virus when I was trying to find a no-CD crack for JA, for which I had lost the disc (Read: legally bought! Shame on you if you don't know that, I've been editing for years.). So it has struck my computer nearly helpless, as every 30 seconds it likes to minimize and maximize random programs, pop up windows saying 'would you like a FREE virus check?' and it somehow totally hid my programs list in the start menu and the entire hard drive! As in, there is a blank space where they should be displayed in the start menu and my computer.

I ran AVG and it came up with a few trojans, and I'm running ad-aware now. Any suggestions?

restart in safe mode and run the virus check from there?

you are a smart man

Safe Mode. Also, and usually most importantly, you need to get the registry entries for those processes out of the "Run" in the registry. (I believe located HKLM->Software->Microsoft->Windows->CurrentVerison->Run and RunOnce). If you can, and you can be quick, you can also end the processes in task manager and delete them from the system32 folder (usually where they are).

Okay I ran the check in safe mode and 300 infected files were found... however, I still get no damned access to my C: drive or start menu! And the popups are still happening, but less frequently.

You are not using the internet right.

Yes, I realized that. I realized that shortly after I foolishly ran a sketchy .exe file to try to run my game right. Now I just want to make it all go away. I'm thinking about a total system restore, after I backup my JA game and my map... :/

Holy hell! I just checked the system restore files and it turns out it made a checkpoint at 2:30 this morning, and I got the virus at 9:30. So basically I didn't lose anything and it's all fixed! I love computers.

So anyways, thanks for your help everyone, I'll take your advice with the safe mode thing into account next time I (and I undoubtedly will) get a virus so I don't have to risk the system restore at all. :D!

And the system restore files were burned to a read only medium that couldn't have been infected?

I say again..

Superantispyware


http://www.superantispyware.com/


At least try running it in safe mode. It is god.

Well seeing as I haven't had a single problem and I ran the scan again after the system restore, I believe I'm safe.

And Onimusha, what are you talking about? You never said superantispyware in the first place.

in tracers thread last week or the week before he did.

oic

Sounds like it might be this. At least the popping up of offers for free anti-virus part.

Oh and before someone says LOL! I have a Mac and don't have to worry about it. This flash ad attack hits Macs, Linux and PC.

HELP!
HELP! I NEED SOMEBODY,
HELP! NOT JUST ANYBODY,
HELP! YOU KNOW I NEED SOMEONE, HELP.

WHEN I WAS YOUNGER, SO MUCH YOUNGER THAN TODAY,
I NEVER NEEDED ANYBODY'S HELP IN ANY WAY.
BUT NOW THESE DAYS ARE GONE, I'M NOT SO SELF ASSURED,
NOW I FIND I'VE CHANGED MY MIND I'VE OPENED UP THE DOORS.

HELP ME IF YOU CAN, I'M FEELING DOWN
AND I DO APPRECIATE YOU BEING AROUND.
HELP ME GET MY FEET BACK ON THE GROUND,
WON'T YOU PLEASE, PLEASE HELP ME.

AND NOW MY LIFE HAS CHANGED IN OH SO MANY WAYS,
MY INDEPENDENCE SEEMS TO VANISH IN THE HAZE.
BUT EV'RY NOW AND THEN I FEEL SO INSECURE,
I KNOW THAT I JUST NEED YOU LIKE I'VE NEVER DONE BEFORE.

HELP ME IF YOU CAN, I'M FEELING DOWN
AND I DO APPRECIATE YOU BEING AROUND.
HELP ME GET MY FEET BACK ON THE GROUND,
WON'T YOU PLEASE, PLEASE HELP ME.

WHEN I WAS YOUNGER, SO MUCH YOUNGER THAN TODAY,
I NEVER NEEDED ANYBODY'S HELP IN ANY WAY.
BUT NOW THESE DAYS ARE GONE, I'M NOT SO SELF ASSURED,
NOW I FIND I'VE CHANGED MY MIND I'VE OPENED UP THE DOORS.

HELP ME IF YOU CAN, I'M FEELING DOWN
AND I DO APPRECIATE YOU BEING ROUND.
HELP ME, GET MY FEET BACK ON THE GROUND,
WON'T YOU PLEASE,
PLEASE HELP ME,
HELP ME,
HELP ME, oh.

yeah i should have specified that.. sorry

LOL! I don't use flash and don't have to worry about it.

Thank you, thats what I thought of too.

System Restore files have permissions set on them that do not allow normal users or administrators to access them.

Of course if there is a virus that has a specific goal to infect those files that won't stop it (you can either use low-level disk access, or infect the SYSTEM user).

For Windows machines I usually use a-vast Antivirus and Spybot Search & Destroy. The TeaTimer utility lets you confirm any changes made to the registry which can save you sometimes.