Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Can I remove a virus if I create a new user, copy all the files to the new user?


  • Please log in to reply
3 replies to this topic

#1 gkid650

gkid650

  • Members
  • 2 posts
  • OFFLINE
  •  

Posted 17 July 2013 - 10:13 PM

I'm running Win 7. About the virus - at first each time I started the computer I saw an Internet Security fake scan, and it disabled all .exe. Now I see a US Courts MoneyPak screen. Safe Mode won't start. System restore doesn't work either because the restore points are too recent. I googled how to remove the virus, but most require dowloading and installing programs - which I don't want to do. I would prefer to manually delete the virus files. I found a couple videos that edit the registry, but I can't find the infected files in my reg. Which got me to thinking... Using the command prompt I created a new user which creates a new, clean reg. No problems with the computer logged in as the new user. All the programs work ok, and I've copied all the files from the infected user to the new user. If I now delete the infected user, does that also delete the registry for that user and the virus along with it (assuming the virus is in the registry)?

BC AdBot (Login to Remove)

 


#2 gkid650

gkid650
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  

Posted 21 July 2013 - 01:41 AM

Hello? Anyone?

#3 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,860 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:23 AM

Posted 21 July 2013 - 02:24 AM

 {{ and I've copied all the files from the infected user to the new user }}.......and i would imagine you will have also copied some "infection" right along with them......

 

I am not sufficiently well versed in the art which is practiced here on a daily basis....but the very fact that the "art" exists tells me that tis not quite that simple......

 

Perhaps someone with more experience could verbalize the actual reasons why....

 

In the meantime, I would prepare some DDS logs for the Malware removal area if i were you.

or if you really do have an aversion to downloading the various tools required to fix this problem....Reformat. Works every time.

(On a personal note....I found the various tools required to get rid of virus' etc etc far less intrusive than the virus' themselves.)

 

Brian


Condobloke ...Outback Australian  

 

fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy


#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:04:23 AM

Posted 21 July 2013 - 07:04 AM

Hello gkid -

Please read This Topic on United States Courts Ransomware Removal from Bleeping Computer Guides.
Is this the same version that you have on your system ??

 

Thank You -






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users