'windows salvage system'

[mojo247]

how do i get rid of this virus/trogan/malware program? I have mcafee but its not letting me scan & remove. Also ie & mozilla crashes as soon as i open them. Btw Im running win 7.

 

[huggi]

start windows in safe mode with networking and download malwarebytes update and run. also turn off windows restore.

 

[mojo247]

start windows in safe mode with networking and download malwarebytes update and run. also turn off windows restore.

tried this but still cannot access the net .the warning sign pops up. Can i remove prog via regedit.exe ?

 

[huggi]

whats the actual trojan?

 

[mojo247]

whats the actual trojan?

Not sure what its classed as but it say 'backdoor.win32.rbot on the warning pop up screen also a small pop up at the bottom right screen comes up as malware aswell.

 

[Fyobl]

Try this:

Kill the following processes
~5c.exe, 50cent.exe, nav32sp.exe, prot.exe, lsasss.exe

Unregister the following DLLs and reboot
oi00r1z.dll.

Delete these registry entries
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\system32
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices\system32

Remove the following files
50cent.exe, files.ini, nav32sp.exe, oi00r1z.dll, prot.exe, ~5c.exe.
lsasss.exe in Windows\system32\

Let me know how it goes?

 

[mojo247]

Try this:

Kill the following processes
~5c.exe, 50cent.exe, nav32sp.exe, prot.exe, lsasss.exe

Unregister the following DLLs and reboot
oi00r1z.dll.

Delete these registry entries
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\system32
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices\system32

Remove the following files
50cent.exe, files.ini, nav32sp.exe, oi00r1z.dll, prot.exe, ~5c.exe.
lsasss.exe in Windows\system32\

Let me know how it goes?

will give it a try later, cheers

 

[mojo247]

sorted.

managed to do a 'system restore'

 

[Fyobl]

I take it you didnt try what i post in my last post?

Wanted to know if that worked...

Anyway glad your up and running again!

 

[mojo247]

I take it you didnt try what i post in my last post?

Wanted to know if that worked...

Anyway glad your up and running again!

thanks

:Clap:

 

[wiz569]

sorted.

managed to do a 'system restore'

I could be wrong but I don't think a system restore will get rid of a virus completely mate

Sent from my ZTE-BLADE using Tapatalk

 

[unison]

I could be wrong but I don't think a system restore will get rid of a virus completely mate

Sent from my ZTE-BLADE using Tapatalk

no your right system restore just makes them inactive i would boot in safe mode and run malwarebytes again or what ever you are using
see if that picks it up