problema virus

am nevoie de putin ( putin mai mult ) ajutor.

de curand am prin un virus care nu vrea deloc sa ma lase in pace.dupa ce mi-a dezactivat task manager-ul, acum nu ma mai lasa nici sa instalez/rulez vreun antivirus.

am incercat sa scap de el cu Malwarebytes anti-malware de vreo 2 ori insa fara succes.


ce pot face ?

aici este ultimul scan cu malwarebytes anti-malware:


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4586

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

9/10/2010 4:12:24 PM
mbam-log-2010-09-10 (16-12-24).txt

Scan type: Full scan (C:\|)
Objects scanned: 159480
Time elapsed: 35 minute(s), 15 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 5
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
C:\Documents and Settings\GusTy\Local Settings\Temp\winnmfpqx.exe (Trojan.Downloader) -> Failed to unload process.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\GusTy\Local Settings\Temp\winnmfpqx.exe (Trojan.Downloader) -> Delete on reboot.


multumesc!

Iei un Live Cd( recomand cu linux). Bagi cd-ul in unitatea optica, repornesti pc-ul si intri in live CD-mode. Dupa asta montezi partitia cu windozele
si stergi acel fisier .exe si poti spune bye-bye virus. Ca sa repari Task Manager stiu ca trebuie sa modifici un registru.

Baga nod32 ca te rezolva,sterge-l singur din safe mode.

virusul acela este de win32.

Ai văzut tu viruși de mac să zicem care ruleaza pe windows? Eu nu.

.se stocheaza in registrii..

In registrii se stocheaza doar LOCUL UNDE SE AFLA EXECUTABILUL nu executabilul in sine.

este foarte greu sa il stergi,

Dacă trebuie sa pornești sistemul de operare propriuzis e greu spre imposibil. Cu metoda mea merge garantat

problema este ca ai mult de curatit in registrii si multm ia repede ai rezolva-o cu un clean windows

Aici nu știu dacă ai dreptate, dar probabil că ai ( tu știi mai bine OS-ul decăt mine)