Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

win32/cryptor [Split topic]


  • Please log in to reply
1 reply to this topic

#1 Nightvixen

Nightvixen

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:33 AM

Posted 31 July 2009 - 03:19 PM

ok this is how i removed win32/cryptor

Before reading: this solution worked on my computer which runs windows xp ...not sure if it will work on any other windows operating system...
also note that i had no problem opening any files or running my avg or malwarebytes(incidentally malwarebytes did not find this virus, my avg 8.5 free did)

i slapped down 30 bux for prevx 3.0 which was recommended by another forum i use for removal of this virus. you can do a scan of your computer for free before paying the 30 bux for the license required to clean up win32/cryptor. that free scan did find the cryptor on my computer. to do the scan just double click on it from the prevx3.0 home page. it will scan after it is done downloading which took no time at all.

prevx 3.0 is pcmagazine's editors choice for anti spyware and malware programs. read this article to see what the reviewer wrote:

http://www.pcmag.com/article2/0,2817,2346861,00.asp

after prevx finds the virus follow its instructions to remove it. anybody can do it...its just things like letting your computer reboot and disabling your internet connection for part of the removal. it does everything else.

prevx got rid of the cryptor but since cryptor was attached to my rundll32.exe file, that file was deleted which is necessary to run windows and open programs from windows. i found this out after much research and noticing that my computer would give me the message "which program would you like to use to open this file?"
whenever i clicked on anything but the prevx.

to restore this(rundll32.exe) file go to this page:

http://www.kellys-korner-xp.com/xp_tweaks.htm

and click on option 12. download to your desktop.
after download is finished double click on the icon on your desktop to run it. it will add the missing registry files and merge them into your system file. VOILA!!!! Virus free working computer. This solution was found after many many failures and 5 days of research. it does work!!!!!!


I couldnt be happier with prevx 3.0!!!
edit:symptoms of the virus i noticed before i ran my avg 8.5 free were being hijacked when clicking on webpages after a google search,overall slow performance,not being able to view some webpages

Edited by Nightvixen, 31 July 2009 - 03:29 PM.


BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:06:33 AM

Posted 03 August 2009 - 01:24 AM

I'm glad you solved your problems. However, please note that what may work on one computer could cause serious damage on another. This is because each computer is unique in its OS configuration and mix of software and so is the malware mix.

Malware removal instructions are specific for ONE computer for a specific set of circumstances.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users