All Forums | Technology

virus help

Participants:
Search model icon
Views: 935
Posts: 16
 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #1
 I've been getting ads without opening windows and virus warning notification.  when i scan my system, this message came up. 
"The On-Demand Scan found alterations to code or data which may indicate that a rootkit is attempting to hide files, registry keys, processes or other items.  If this scan fails to find anything then the computer should be scanned with McAfee PreScan or booted into Safe Mode and this scan run again"

 I don't think I have McAfee PreScan and i don't know what safe mode is.
 
Banned
Participation Meter
Joined: Mar, 2007
Posts: 6681
Posted: #2

Here is what I found when I googled that paragraph

https://www.vistax64.com/vista-security/137647-rootkit.html

 

If you don't have AVG or Avast, they are both good programs that have free downloads...

Here are links to both

AVG

Avast

 

You can also PM Lippsman, who is by far the wizard of computers
He fixed a computer I had that had been infected and was "dead"

Good luck

 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #3


I have AVG but it didn't find anything, so i downloaded McAfee and that's when i got that message. 
 
Veteran
Participation Meter
Joined: Nov, 2005
Posts: 3852
Posted: #4
Try Malwarebytes
 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #5
Quote Originally Posted by KQC:

Try Malwarebytes





 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #6
Malwarebytes didn't seem to help, I scanned it several times but I keep getting the same infected files/folder that I already deleted. I'm still getting pop ups ad plus when I do a search using google it redirects me to different website that I didn't want.
 
Veteran
Participation Meter
Joined: Nov, 2005
Posts: 3852
Posted: #7
Try booting up your pc in safe mode (F8 while the pc is booting up) and running both AVG and malwarebytes
 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #8
I did that earlier with all three in safe mode (AVG, malwarebytes and McAfee).  AVG found and deleted about 9 files(mostly Trojan) and got nothing with the other two.   The message on my first post didn't appear in safe mode but it's still there when I'm not in safe mode. 
 
Captain
Participation Meter
Joined: Apr, 2005
Posts: 8856
Posted: #9
If none of these work for you, I do know ComboFix can fix the Google redirection thing, so that might be a program to try if all the above fails.   You can get it here and download it from bleepingcomputer.  Make sure to follow the directions. You will have to disable any anti-virus before running, so be sure to know how to do that. it's an advanced program, so use with caution.


 
Captain
Participation Meter
Joined: Apr, 2005
Posts: 8856
Posted: #10
If you run ComboFix, I usually run Malwarebytes and whatever AV program is on the machine after just to see if that picks up anything after ComboFix is done.
 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #11
Quote Originally Posted by jackjaffee:

If you run ComboFix, I usually run Malwarebytes and whatever AV program is on the machine after just to see if that picks up anything after ComboFix is done.


Thank you, the redirecting thing finally stopped.  I run Malwarbytes afterward, it found 15 items infected and was able to delete it.  But I now get a "RUNDLL" error that says "kzbveirv.dll could not be found", at start up.  Any idea what that is?
 
Covers Linesmen
Participation Meter
Joined: Feb, 2001
Posts: 87445
Posted: #12

Quote Originally Posted by newkid:



Thank you, the redirecting thing finally stopped.  I run Malwarbytes afterward, it found 15 items infected and was able to delete it.  But I now get a "RUNDLL" error that says "kzbveirv.dll could not be found", at start up.  Any idea what that is?

Are you sure that is the exact .dll.  I have nothing about that .DLL in my databases.

 
Captain
Participation Meter
Joined: Apr, 2005
Posts: 8856
Posted: #13
Quote Originally Posted by newkid:



Thank you, the redirecting thing finally stopped.  I run Malwarbytes afterward, it found 15 items infected and was able to delete it.  But I now get a "RUNDLL" error that says "kzbveirv.dll could not be found", at start up.  Any idea what that is?


See if it's in your startup.  Sounds like a suspicious file name to me and is probably left over from the virus.

Go to Start -> Run and type msconfig.  Click on the Startup tab and see if that is listed in there.  If so, uncheck it.
 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #14
Quote Originally Posted by Lippsman:

Are you sure that is the exact .dll.  I have nothing about that .DLL in my databases.



I guess it changed because that's what it said before.   Now it says "dgtavyjv.dll"
 
Veteran
Participation Meter
Joined: Sep, 2008
Posts: 3965
Posted: #15
Quote Originally Posted by jackjaffee:



See if it's in your startup.  Sounds like a suspicious file name to me and is probably left over from the virus.

Go to Start -> Run and type msconfig.  Click on the Startup tab and see if that is listed in there.  If so, uncheck it.


  it worked. 
Should I delete it, if it's left over from the virus.  This is what is says on the system configuration utility:
Startup Item- rundll32  "dgtavyjv
Command - rundll32 "dgtavyjv.dll",,Run
Location - SOFTWARE\Microsoft\Windows\CurrentVersion\Run



 
 
Covers Linesmen
Participation Meter
Joined: Feb, 2001
Posts: 87445
Posted: #16
Whack it.  So to speak.
All Forums | Technology
About Us
Contact Us
Careers
Our Team
Brand
Testimonials
Betting Guides
Sportsbook Reviews
Sports Betting News
Podcasts
Responsible Gaming
Sports Betting
US Betting Sites
Canada Betting Sites
Canada Casinos
Best Betting Apps
Contests
Streak Survivor
King of Covers
Ultimate Race
Office Pools
The Covers community has
618,670
lifetime members worldwide
Covers 25 Years Logo Established in 1995,
Covers is the world
leader in sports
betting information.
Site Map Help Privacy Terms of Service youtube logo facebook logo twitter logo instagram logo linkedin logo google news logo
Covers is verified safe by: Evalon Logo GPWA Logo GDPR Logo GeoTrust Logo Evalon Logo
Copyright © 1995 - 2024 CS Media Limited All Rights Reserved.

If you choose to make use of any information on this website including online sports betting services from any websites that may be featured on this website, we strongly recommend that you carefully check your local laws before doing so.It is your sole responsibility to understand your local laws and observe them strictly.Covers does not provide any advice or guidance as to the legality of online sports betting or other online gambling activities within your jurisdiction and you are responsible for complying with laws that are applicable to you in your relevant locality.Covers disclaims all liability associated with your use of this website and use of any information contained on it.As a condition of using this website, you agree to hold the owner of this website harmless from any claims arising from your use of any services on any third party website that may be featured by Covers.