Registry Edit Program

Stinkerbell · December 16, 2010, 02:49:58 PM

Homer, you've mentioned a program for cleaning registry issues. My son got another virus on his computer, and I was able to use Housecall to shut it down, but there are still some issues. For one, there's a program that keeps running and showing up in the task manager... a string of letters and numbers ending in .exe. I've run the full version of TM also, and it's saying that it's not finding anything, but now out of the blue ads pop up on the desktop and also there'll be random audio ads come up.

I don't know what else to do, other than beat his ass and take the computer to the shop again. If I can't get it fixed on my own, I'm taking the money out of his savings.

Homer · December 16, 2010, 03:52:49 PM

I use the advanced system care program to clean the registry. Task Manager tells you what processes are running and gives a description. I would google anything you think is suspicious. PC's are so diffferent there is no "set list" of what should or shouldn't be running in your processes. Various programs ranging from Microsoft software, AV programs and general junk and garbage can appear in there. All depends what has been installed on your pc. If I was you I would not give your son administrator rights and that will prevent him from downloading anything unless you do it.

Stinkerbell · December 16, 2010, 06:06:38 PM

The virus is Antivirus8 and it's nasty. He got from clicking on some links in YouTube, or so he says. Pisses me off. TM found 2 things yesterday and fixed it, and again today found a couple. Malwarebytes is running now with 11 infected somethings so far. I googled the suspicious code that was running and nothing at all came up.

I'll take care of the admin rights, for sure.

Thanks for the help.

Homer · December 16, 2010, 06:18:47 PM

you can also block websites if you know youtube is definitely the problem

control panel
internet options
general
content
content advisor
enable
approved sites

enter websites you want blocked or allowed and choose block/never or allow

Stinkerbell · December 16, 2010, 06:33:47 PM

Quote from: Homer on December 16, 2010, 06:18:47 PM
you can also block websites if you know youtube is definitely the problem

I don't know for sure that it was YouTube directly. He said that he was watching a Halo video and reading the comments and someone had posted a link in the comments that took him to a **** site. He says that he closed it right away (probably not) and that shortly after the problem started. He had AVG up and updated, but it still got through.

Homer · December 16, 2010, 06:36:11 PM

Quote from: Stinkerbell on December 16, 2010, 06:33:47 PM
I don't know for sure that it was YouTube directly. He said that he was watching a Halo video and reading the comments and someone had posted a link in the comments that took him to a **** site. He says that he closed it right away (probably not) and that shortly after the problem started. He had AVG up and updated, but it still got through.

Ahhh...I often watch the video game walkthroughs but never click any links in the videos

Stinkerbell · December 16, 2010, 09:26:26 PM

Yeah... he knows better, but he just couldn't resist. Bugger.

Anyway, Malwarebytes ran and found another 400 files and removed most of them, but said some couldn't be removed. So tomorrow I'm going to run it again and see if it flags the same files and try removing them again. The computer is running soooo much faster and that one line that kept running through task manager is gone.

Thanks for being my sounding board.

Homer · December 17, 2010, 06:40:14 AM

No problem. Here's some mother's little helpers for your nerves.

just don · December 17, 2010, 10:52:39 AM

Go to start and run. Type msconfig, and than go to start up menu. Shut down anything that makes no sense there...Hell, shut down everything that is not your AV program and your puter might run like a dream again. If it is a program that is always running, this will stop that evil program dead. If it can't start, it can't run! Good luck, and don't beat your son to badly. Just saying.

Stinkerbell · December 17, 2010, 05:44:49 PM

Quote from: Homer on December 17, 2010, 06:40:14 AM
No problem. Here's some mother's little helpers for your nerves.

So, as I said - Malwarebytes found over 400 files that were infected. It deleted most of them, but there were others it said it couldn't delete. Unfortunately, it didn't tell me which ones. Hundreds of those were from "whitesmoke." Anyway, I ran it again today and now it found nothing. I'm wondering why that is since there were some it couldn't delete? Anyway...

That code is running again in the task manager, over and over. It's g3Vo2V6.exe I've been doing searches but can't find anything about what it might be, if it should be there or not. There have been no popups, but the TM firewall keeps turning itself off. I have a feeling it's not TM doing it.

Should I run another program to see if it catches something TM and Malware didn't? If so, any suggestions? Or is it time to throw in the towel?

Stinkerbell · December 17, 2010, 05:46:12 PM

Quote from: just don on December 17, 2010, 10:52:39 AM
Go to start and run. Type msconfig, and than go to start up menu. Shut down anything that makes no sense there...Hell, shut down everything that is not your AV program and your puter might run like a dream again. If it is a program that is always running, this will stop that evil program dead. If it can't start, it can't run! Good luck, and don't beat your son to badly. Just saying.

That was one of the first things I did. Guess what? Didn't work. I had to start in safe mode with networking, and run housecall just to get the damn virus to stop popping up. Then I ran TM, then Malwarebytes. It's much better than it was, but I don't feel safe yet.

C~M · December 17, 2010, 05:56:10 PM

Try this program>>>>>>>>>SUPERAntiSpyware Professional

Stinkerbell · December 17, 2010, 05:57:56 PM

Quote from: Crazy~Man on December 17, 2010, 05:56:10 PM
Try this program>>>>>>>>>SUPERAntiSpyware Professional

Thanks, CM. This is making me sick to my stomach. I'm so disgusted with hackers AND my son.

C~M · December 17, 2010, 06:00:28 PM

Quote from: Stinkerbell on December 17, 2010, 05:57:56 PM
Thanks, CM. This is making me sick to my stomach. I'm so disgusted with hackers AND my son.

This is a great program, it is freeware, but I bought it, only cost $19.95 for lifetime updates and support

snowflower · December 17, 2010, 06:00:36 PM

I wish I knew just 1/2 as much as you guys, wow!

On the other hand

this is just the place to be to learn it, isn't it.

Now lets see anyone do any better'n Pogo Cheats and the gang!

just don · December 18, 2010, 09:57:18 AM

Thank you, but I can see I was no help in solving the computer issue. They can be frustrating as heck to figure out, and worse, they can keep you from working on a badge. I tried to find any info on the task manager exe program you posted and also struck out. Most of the running programs there are harmless, in fact some are needed. Have you tried a roll back system restore? Don't give up and don't kill the kid! Worse case is you do a full system restore......that's always drinking a beer time....again so sorry and good luck.

Stinkerbell · December 18, 2010, 05:43:50 PM

Thanks, just don. All of the research I did on this said that this virus writes itself into your system restore points, too. Today is the first day I was able to bring up IE without ads popping up and IE crashing. Running ASC and all it's programs seemed to do the trick. HOWEVER, I'm still not convinced that it's totally gone and told my son not to do anything on that computer requiring a log in.

My son in law is the Vice Principle at the local high school. His computer tech teacher said that if we brought it in they'd have one of the students reformat it. With the teacher's supervision, of course.

Homer · December 18, 2010, 06:06:58 PM

Quote from: Stinkerbell on December 18, 2010, 05:43:50 PM
Thanks, just don. All of the research I did on this said that this virus writes itself into your system restore points, too. Today is the first day I was able to bring up IE without ads popping up and IE crashing. Running ASC and all it's programs seemed to do the trick. HOWEVER, I'm still not convinced that it's totally gone and told my son not to do anything on that computer requiring a log in.

My son in law is the Vice Principle at the local high school. His computer tech teacher said that if we brought it in they'd have one of the students reformat it. With the teacher's supervision, of course.

Since you are gonna wipe it clean remember to backup any important stuff

Stinkerbell · December 18, 2010, 07:16:30 PM

Quote from: Homer on December 18, 2010, 06:06:58 PM
Since you are gonna wipe it clean remember to backup any important stuff

Thanks, but no worries. There's nothing at all important on that computer.

just don · December 20, 2010, 10:36:30 AM

Dang, I should stop by more often. Two days later, I'll just say so sorry again, and I'm glad you have a plan to fix this issue without killing your son. As Homer has pointed out on many occasions, ASC is a great freeware program to use, and I have tried many I've seen mentioned in this thread. Odd thing, is Malwarebytes once helped me in a similar situation. I can't recall if it was before I learned about ASC? Oh well, hat's off to Homer and merry xmas to all.

Registry Edit Program

Quick Reply