Redirect Virus

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Nuvo
    S2Forum Possessed
    • Nov 2003
    • 3827

    #31
    I would favour the first link I gave as this is from the official site, ignore the second mirror file as it is a 0 byte file for some reason.

    I would recommend always getting files such as these from the official site if you can as they will have the most up to date definitions.

    Other sites sometimes may only have an older version which appears to be the case with the Cnet file you mention. Personally I wouldn't use it.

    HTH.
    Last edited by Nuvo; 17 October 2010, 11:00.

    Comment

    • newsh
      S2Forum Obsessed
      • Aug 2003
      • 16226
      • Country: United Kingdom

      #32
      Ok thanks

      S2 Coupe 3B Project


      Ur quattro restoration

      S2 Avant

      Boost is the new rock and roll!
      sigpic

      Comment

      • newsh
        S2Forum Obsessed
        • Aug 2003
        • 16226
        • Country: United Kingdom

        #33
        After the Malware bytes stage, we rebooted and AVG popped up with the SHEUR3 warning again, so we went into safe mode, uninstalled AVG and we're now running Avast, we're up to 5000 infected files and only half way through the drive

        S2 Coupe 3B Project


        Ur quattro restoration

        S2 Avant

        Boost is the new rock and roll!
        sigpic

        Comment

        • Nuvo
          S2Forum Possessed
          • Nov 2003
          • 3827

          #34
          AVG cannot be relied upon to defend from or detect trojans accurately in some cases.

          Give this a shot:
          1. update AVG
          2. turn off system restore
          3. re boot into safe mode & run AVG
          4. re boot if clean turn on system restore

          If you find that AVG no longer detects the SHEUR3 trojan under these conditions it confirms that this trojan is lurking in the system restore folder (hidden by default).

          Uninstall AVG and get something better.

          Comment

          • newsh
            S2Forum Obsessed
            • Aug 2003
            • 16226
            • Country: United Kingdom

            #35
            Ok well, as I said we already uninstalled AVG and we're trying Avast, the scan finished and we deleted 6000 files ! Just running malwarebytes again before rebooting in normal mode.

            I'll try turning off system restore if the popup still comes up. What do we do if its hiding in the system restore folder then?

            S2 Coupe 3B Project


            Ur quattro restoration

            S2 Avant

            Boost is the new rock and roll!
            sigpic

            Comment

            • Nuvo
              S2Forum Possessed
              • Nov 2003
              • 3827

              #36
              Sorry, I missed that you changed to Avast!. If it still persists when System Restore is turned back on then you have a few choices.

              You can either try another AV or if you are confident that you'll never need to restore to an earlier date then you can prune the hidden System Volume Information folder.

              To view this folder, follow this How To guide.

              Comment

              • newsh
                S2Forum Obsessed
                • Aug 2003
                • 16226
                • Country: United Kingdom

                #37
                Well the popup is gone but IE and mozilla do not work and we've got an iTunes warning about a missing DLL. Tried Regcure which said it fixed 2000 problems, no joy, just going to try the recovery console..

                S2 Coupe 3B Project


                Ur quattro restoration

                S2 Avant

                Boost is the new rock and roll!
                sigpic

                Comment

                • newsh
                  S2Forum Obsessed
                  • Aug 2003
                  • 16226
                  • Country: United Kingdom

                  #38
                  Found the auto fix option in windows setup so running that, 37mins to go ... Its a laugh init

                  S2 Coupe 3B Project


                  Ur quattro restoration

                  S2 Avant

                  Boost is the new rock and roll!
                  sigpic

                  Comment

                  • newsh
                    S2Forum Obsessed
                    • Aug 2003
                    • 16226
                    • Country: United Kingdom

                    #39
                    Its hopeless, going to have to backup the D drive and do a fresh install of windows

                    S2 Coupe 3B Project


                    Ur quattro restoration

                    S2 Avant

                    Boost is the new rock and roll!
                    sigpic

                    Comment

                    • Nuvo
                      S2Forum Possessed
                      • Nov 2003
                      • 3827

                      #40
                      You would probably have had better success if you'd booted from a PE disc to restore to the most recent restore point (or one before last). From this point I would have created a working image of the drive, then you could seek to delete all restore points and rescan with an AV tool.

                      Sometimes there comes a point when its best to cut you losses and do a fresh install as you say.

                      Comment

                      Working...