Unable to install antivirus

[mischief_ash]

Hello...

My comp in college is infected with some virus. And it does not let me install any antivirus. I've tried avira, NAV, KAV...

The virus creates a (name of folder).exe file in every folder...

Any thing that does not require reformat is welcome.

[shan]

the virus/spyware naming new folder.exe,but its real source file name is mahsa.exe, its 104KB in space n as u try 2 delete it it comes again n again,the thing is the original file that transmits the orders to that location to creat simultaneously same file is in ur documents n settings...n it wont get delete, it will give error of some kinda access denied,no antivirus naming AVG free tackles it cuz its u can say brandnew approach,so what u have to do is simply reboot ur PC n get it to the safe mode(by pressing F8 in the start screen)...then wait abit..as the OS starts open the administrator account ( its easy just type administrator n enter if u havnt given any password then)...now 1st of all go to the folder options in the mycomputer/tools n check the option naming show hidden stuff n also check the system files show option...now come to the main screen,cntrl+alt+del...once...here u wil get the task manager bar,in it click the processes, there will be a file that will be running (which is the virus source file) in my case it was dump file u can check ur side(its easy cuz all u have to do is try 2 check that which process is abit suspicious...uncheck it...now come 2 main screen....
from start click run,,,over here type msconfig...in it go to the startup options,overhere u mst be very active, search the same file name over here(dump in my case) n uncheck it...
half work done...go to documents n setting where there is the main source file of new folder is copied (which dont delete) delete them now they will vanish...now go to search through start menu...in the files n folder option click the advance options n over there check the options having the search option of all the systrem files hidden files etc etc...each n every option of it...now type new folder in the search bar n search...all the files naming new folder will be in front of u,
delete all the files naming new folder which have the 104KB size, delete all of them, n search again n again twice thrice...maek sure nothing be there, there was another file naming top pictures in my PC,,, its also 104KB file, try 2 search 4 it too n delete it...there u go pal...jobs done...just simple restart n u got ur PC back
hope u will reply back if it worked

this was what i found in the internet


but u can also try these
http://www.raymond.cc/blog/archives/2008/06/28/free-avira-antivir-rescue-system-cd-to-clean-unremovable-virus/

http://www.raymond.cc/blog/archives/2008/07/26/free-f-secure-rescue-cd-300-to-clean-virus-from-unbootable-windows/

http://www.raymond.cc/blog/archives/2008/11/15/free-drweb-livecd-to-scan-and-remove-virus-without-starting-windows/

http://www.raymond.cc/blog/archives/2008/06/16/kaspersky-offers-free-rescue-disk-to-clean-virus-without-booting-in-windows/

http://www.raymond.cc/blog/archives/2008/11/30/download-norton-recovery-tool-iso-to-create-a-norton-rescue-cd/

http://www.raymond.cc/blog/archives/2008/07/17/bitdefender-offers-free-rescue-cd-with-ability-to-auto-update-virus-definition/

[Mark]

Great Links Shan

Also, try this: SmitFraudFix

It claims to remove Advanced Antivirus, AdwarePunisher, AdwareSheriff, AlphaCleaner, AntiSpyCheck, AntiSpyware Expert, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntiVirGear, Antivirus 2009, Antivirus 2010, AntiVirus Lab 2009, Antivirus Master, Antivirus Sentry, Antivirus XP 2008, AntivirusGolden, AVGold, Awola, BraveSentry, IE Defender, Internet Antivirus, MalwareCrush, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, Micro Antivirus 2009, MS Antivirus, PC Protection Center 2008, Personal Defender 2009, PestCapture, PestTrap, Power Antivirus, Power-Antivirus-2009, PSGuard, quicknavigate.com, Registry Cleaner, Security iGuard, Smart Antivirus 2009, Smitfraud, Spy Protector, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Guard 2008, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareRemover, SpywareSheriff, SpywareStrike, Startsearches.net, System Antivirus 2008, TheSpyBot, TitanShield Antispyware, Total Secure 2009, Trust Cleaner, Ultimate Antivirus 2008, UpdateSearches.com, Virtual Maid, Virus Heat, Virus Protect, Virus Protect Pro, VirusBlast, VirusBurst, VirusRay, Virus Remover 2008, VirusResponse Lab 2009, VirusTrigger, Win32.puper, WinHound, Vista Antivirus 2008, WinDefender 2009, XLG Security Center, XP Security Center, XPert Antivirus, Brain Codec, ChristmasPorn, DirectAccess, DirectVideo, EliteCodec, eMedia Codec, EZVideo, FreeVideo, Gold Codec, HQ Codec, iCodecPack, IECodec, iMediaCodec, Image ActiveX Object, Image Add-on, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, LookForPorn, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, NetProject, Online Image Add-on, Online Video Add-on, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, Pornovid, PrivateVideo, QualityCodec, Silver Codec, SearchPorn, SexVid, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, Video Add-on, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec...

[shan]

sons of guns all these are rouge softwares

[Ceyfer √]

Try this little tool created by my friend - I used this to kill Sohanad variants with new folder.exe symptoms

Noob Killer is a small tool designed to easily rid common worms and viruses, it has many useful tools that would help users and administrators get back control and clean their PC´s/Workstations.

Very useful esp. against made in the philippines malwares and variants .
The most recent version is able to pick up and remove the Following || possible new and Old versions. * VBS Worm\Solow
* Baguio Strawberry Worm
* Yahoo! Worm (Sohanad) || Some Variants
* Krag.exe (I´m Not The Only One)
* Destrukto | explorar.vbs
* jay.exe | jaymykawen9
* w32dranyam | marcmaynard.exe
* Funny UST Scandal(Avi).exe
* SilentSoftech.exe | anti-taga lipa are
* Disk Knight
* Thank You!! Password WinZip123 | password_viewer.exe bar311.exe
* iloveher.exe | say no to drugs!!!
* display monitor.exe | new folder variant
* ImgKulot and variants, jamesgo, bungoton and the like [*.bat, *.reg, *.vbs collection]
* kxvx | kavo, amvo, kevo
* transmit.exe setup.exe | black pegasus
* .. and still counting!

Visit this link for downloads and more infos
http://ocxt.multiply.com/journal/item/125

[Raymond]

Try Sohanad Removal Tool v2.1



[ Download ]