Remove windows recovery virus

[captain scarlet]

My computer has got the 'remove windows recovery' virus which I have tried to remove with all the instructions from this web site :

http://www.bleepingcomputer.com/viru...ndows-recovery

but it did not work and I now can't connect the computer to the internet.

I have emailed three computer specialists listed in the business pages of caithness.org but received no response from any of them.

Help!

[Niall Fernie]

I would suggest the 30 day trial of Hitman Pro.

Worked so well for me that I signed up for a year.

Once its done its work you may have to remove some proxy settings from all of your browsers that prevent them connecting to web sites.

[torisdale]

A few people I know have had this recently, it's a good pain in the back side!

1) Click "Start menu".
2) Go to "Run" and type in "msconfig", Confirm the UAC
3) Remove an services/startup programs that are unknown or not a trusted company that you know of (Not intel, microsoft)
4) Reboot and then go into your drive, find the program to delete it

If you can't see any of your files (Don't worry there not gone) go into your drive, then the user your on, right click and go to properties and make sure you untick the "hidden" checkbox.
I can do this by remote support for you or if you want better instructions just give a shout or personal message me for my number.

Best of luck,
George

[captain scarlet]

Hiya

Many thanks for all your very helpful responses. Bobovanich contacted me and he is confident he can fix it for me. Once i get the computer back, I will give that Hitman Pro a try, Niall, I really don't want to have this bug again!

Thanks everyone.

Jim

[dx100uk]

run combofix from a penstick under F8 safemode with network [connect via an ethernet cable though to your hub]

dx

[abetterlife]

Hi re Torisdale
I have just got this infection for the second time, after a complete fresh windows re0install.
Now following your thread... however, under 'start' the facility to 'Run' has disappeared, so ai cant see how to run msconfig. ANy ideas?
Rick

[dx100uk]

just type CMD in the search box

whats the operating system?

if you are getting re-infected download and install MSE
and
do a FULL SCAN of every drive

also turn on show known file extensions in explorer options
and
empty internet cache on IE options.

if you've done a fresh install

then its either an infected .jpg.exe file
or you are browsing the internet using an account that has admin rights.
never ever do that.

allows activeX macros etc straight through from infected site.

dx