Need help removing "Virus Protector"

[David]

My laptop has been taken over by some infection/virus/malware called "Virus

Protector". Upon booting a pop up appears counting and listing infections.



Have visited other forums, read directions on how to remove "Virus

Protector" scumware using Malwarebytes. Believe me, I want to follow the

directions fully but I am not able to get beyond the initial pop up screen of

Virus Protector that happens on each reboot. There is no control of my

computer available, all I can do is watch the infections pile up like mad!



I am using a Toshiba Qosmio running Windows XP



Booting into normal mode is no good.

Booting into safe mode is no good.

Booting into safe with networking mode is no good.



I did manage to boot into Safe with DOS prompt....cmd.exe screen that has

C:\Documents and Settings\DavidF>



This is hopeful, yes? What do I have to type in to get to a "restore point"?

I read somewhere that going to an earlier point in time when things where

operational would cure this trouble...or at least allow me access to my

computer to run some malware programs.



This program/virus or whatever it is seems to have taken over my computer

and sits there telling me how many infections I have while they, the

infections, compound exponentially.



Thanks in advance,

David

 

[PA Bear [MS MVP]]

NB: If you had no anti-virus application installed or the subscription had

expired when the machine first got infected and/or your subscription has

since expired and/or the machine's not been kept fully-patched at Windows

Update, don't waste your time with any of the below: Format & reinstall

Windows. A Repair Install will NOT help!



Microsoft PCSafety provides home users (only) with no-charge support in

dealing with malware infections such as viruses, spyware (including unwanted

software), and adware.

https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1



Also available via the Consumer Security Support home page:

https://consumersecuritysupport.microsoft.com/



Otherwise...



1. See if you can download/run the MSRT manually:

http://www.microsoft.com/security/malwareremove/default.mspx



NB: Run the FULL scan, not the QUICK scan! You may need to download the

MSRT on a non-infected machine, then transfer MRT.EXE to the infected

machine and rename it to SCAN.EXE before running it.



2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)

in Safe Mode with Networking, if need be:

http://onecare.live.com/site/en-us/center/howsafe.htm



2b. Vista or Win7=> Run this scan instead:

http://onecare.live.com/site/en-us/center/whatsnew.htm



3. Now run a thorough check for hijackware, including posting requested logs

in an appropriate forum, not here. DO NOT SKIP THIS STEP!!



Checking for/Help with Hijackware:

• http://mvps.org/winhelp2002/unwanted.htm

• http://inetexplorer.mvps.org/tshoot.html

• http://www.mvps.org/sramesh2k/Malware_Defence.htm

• http://www.elephantboycomputers.com/page2.html#Removing_Malware



Chances are you will need to seek expert assistance in

http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,

http://www.spywarewarrior.com/viewforum.php?f=5,

http://www.dslreports.com/forum/cleanup,

http://www.bluetack.co.uk/forums/index.php,

http://aumha.net/viewforum.php?f=30 or other appropriate forums.



If these procedures look too complex - and there is no shame in admitting

this isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Client - since 2002





David wrote:

> My laptop has been taken over by some infection/virus/malware called

> "Virus

> Protector". Upon booting a pop up appears counting and listing

> infections.

>

> Have visited other forums, read directions on how to remove "Virus

> Protector" scumware using Malwarebytes. Believe me, I want to follow the

> directions fully but I am not able to get beyond the initial pop up screen

> of Virus Protector that happens on each reboot. There is no control of my

> computer available, all I can do is watch the infections pile up like mad!

>

> I am using a Toshiba Qosmio running Windows XP

>

> Booting into normal mode is no good.

> Booting into safe mode is no good.

> Booting into safe with networking mode is no good.

>

> I did manage to boot into Safe with DOS prompt....cmd.exe screen that has

> C:\Documents and Settings\DavidF>

>

> This is hopeful, yes? What do I have to type in to get to a "restore

> point"?

> I read somewhere that going to an earlier point in time when things where

> operational would cure this trouble...or at least allow me access to my

> computer to run some malware programs.

>

> This program/virus or whatever it is seems to have taken over my computer

> and sits there telling me how many infections I have while they, the

> infections, compound exponentially.

>

> Thanks in advance,

> David

 

[glee]

"David" <whud_up_with_ya@hotmail.com(do not spam)> wrote in message

news:6BD403FD-BEEB-4EFD-9F29-5FAF82E146F6@microsoft.com...

> My laptop has been taken over by some infection/virus/malware called

> "Virus

> Protector". Upon booting a pop up appears counting and listing

> infections.

>

> Have visited other forums, read directions on how to remove "Virus

> Protector" scumware using Malwarebytes. Believe me, I want to follow

> the

> directions fully but I am not able to get beyond the initial pop up

> screen of

> Virus Protector that happens on each reboot. There is no control of my

> computer available, all I can do is watch the infections pile up like

> mad!

>

> I am using a Toshiba Qosmio running Windows XP

>

> Booting into normal mode is no good.

> Booting into safe mode is no good.

> Booting into safe with networking mode is no good.

>

> I did manage to boot into Safe with DOS prompt....cmd.exe screen that

> has

> C:\Documents and Settings\DavidF>

>

> This is hopeful, yes? What do I have to type in to get to a "restore

> point"?

> I read somewhere that going to an earlier point in time when things

> where

> operational would cure this trouble...or at least allow me access to

> my

> computer to run some malware programs.

>

> This program/virus or whatever it is seems to have taken over my

> computer

> and sits there telling me how many infections I have while they, the

> infections, compound exponentially.





I assume you are trying to follow the automatic removal instructions

here?

Remove Virus Protector (Uninstall Guide)

http://www.bleepingcomputer.com/virus-removal/remove-virus-protector



You may have a recently changed version of the malware that is not

allowing you to start the procedure.



Go here:

http://www.bleepingcomputer.com/virus-removal/remove-cleanup-antivirus



Scroll down to the "Automated Removal Instructions" but do this all from

Safe Mode with Networking as described in the article for Virus

Protector removal.



Download and run RKILL.COM EXACTLY as explained on the web page. If

you continue to have problems, download one of the renamed versions, as

explained on the web page.



Then download, update and run MBAM as explained on the original web page

for removing Virus Protector.



If that is successful, then follow ALL of the instructions posted in PA

Bear's reply in this thread...run all the scans he posted, and follow up

with a post of your logs in one of the forums he has linked in his

reply.

--

Glen Ventura, MS MVP Oct. 2002 - Sept. 2009

A+

http://dts-l.net/

 

[sgopus]

Here are some instructions that might help

http://www.malwarehelp.org/virus-protector-removal-2010.html





"David" wrote:



> My laptop has been taken over by some infection/virus/malware called "Virus

> Protector". Upon booting a pop up appears counting and listing infections.

>

> Have visited other forums, read directions on how to remove "Virus

> Protector" scumware using Malwarebytes. Believe me, I want to follow the

> directions fully but I am not able to get beyond the initial pop up screen of

> Virus Protector that happens on each reboot. There is no control of my

> computer available, all I can do is watch the infections pile up like mad!

>

> I am using a Toshiba Qosmio running Windows XP

>

> Booting into normal mode is no good.

> Booting into safe mode is no good.

> Booting into safe with networking mode is no good.

>

> I did manage to boot into Safe with DOS prompt....cmd.exe screen that has

> C:\Documents and Settings\DavidF>

>

> This is hopeful, yes? What do I have to type in to get to a "restore point"?

> I read somewhere that going to an earlier point in time when things where

> operational would cure this trouble...or at least allow me access to my

> computer to run some malware programs.

>

> This program/virus or whatever it is seems to have taken over my computer

> and sits there telling me how many infections I have while they, the

> infections, compound exponentially.

>

> Thanks in advance,

> David

>

>