I have a really bad virus that even runs in safe mode

BleepingComputer.com: I have a really bad virus that even runs in safe mode

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

I have a really bad virus that even runs in safe mode I need help with removal

#1 besoindaide

New Member

Group: Members
Posts: 1
Joined: 08-April 11

Posted 08 April 2011 - 06:40 PM

Hi! I ran into a virus today that acts a a fake spyware called "win 7 home security 2011". It runs under the process erg.exe. I thought ok, I'll go into safe mode and remove with malware bytes, but in safemode the virus still executes. Anytime I try to run one of the spyware removals, erg.exe runs instead and the whole fake anti virus thing pops up.

I read a thread from another site with someone who seemed to have a similar problem, and running rkill worked for him, so I downloaded it (from my desktop computer which im using now) and transferred it to my laptop through USB. rkill.exe did not work at all...erg.exe popped up instead. rkill.com *32 ran, but nothing was removed. malware bytes, spybot etc... still do not run.

What more can I do? I really do not want to reinstall windows completely. I am at the end of my semester and have a lot of work and notes saved there. Undecided

Thanks for any help Grin

p.s.
I am running windows 7
also, regedit and msconfig do not work in safe or regular mode either...erg.exe *32 runs instead
firefox and iexplorer do not work either, virus pops for those programs as well