Install AVG. It’s free and works great!!! I think it is AVG.com
Looks like the malware is running a process on your machine and booting into Safe Mode may keep that process from launching.
Get it? It's a form of spy/adware you have there. Download for free Spybot Search and Destroy and Adaware and run them. You need to get rid of spy/adware, not a virus IMHO.
I would first try Trend Housecall (it's a free online check and is very good) - just Google it and follow the instructions -NO you do NOT want to buy it!
Once that's done look for AVAST! (again it's free and VERY good) on Google and download it, run it and use it as your main AV.
I have heard good things about AVG - but you can only run AVG or AVAST! - not both at the same time.
Good luck!
ExpressAntiVirus2009?
Norton has it:
http://www.symantec.com/norton/security_response/writeup.jsp?docid=2008-123111-2625-99&tabid=2
One course of action which may help...
1. Do a system restore to a point prior to the virus activating.
2. Restart and make sure it is not active anymore.
3. Do a complete virus scan.
4. Turn off system restore. This will/should get rid of any files that are held in the recovery DB.
5. Restart.
6. Turn system restore back on.
I got it, too - about a month ago. A page kept coming up (supposedly from Windows), saying I had 13 critical threats - and to click ‘here’ to remove them. Of course I ‘clicked’ and then they wanted my email address or pay pal to pay for it. That is when I knew it was a ‘virus’. It kept popping up every couple minutes. I would shut it down, only for it to return again.
I called my computer tech guy, and he came over and removed it. He told me that he has been working around the clock to clear it from his customer’s computers.
I think I read that two young men were arrested for setting off this virus, and they had already made millions from it. I’ll try to find the link. Good luck!
Any mention of “Anti-virus 2009” in the message???
Seems to be going around. Infected two guys here at work and IT never saw it.....
http://www.2-spyware.com/remove-antivirus-2009.html
You might try this. It worked for the guys here......
Give it Delsym, NyQuil and Zicam. Viruses generally last a week. Also, if it has a fever, give it ibuprofen as prescribed, drink plenty of water to avoid dehydration and rest in bed.
I got the same thing from a supposed legitimate parts site linked to from a Jeep forum. This was a month ago or so. I thought I had stopped everything. But I ran all three of my anti-virus/spyware programs. My firewall didn’t block anything (Zone Alarm) because I clicked the link. However, when I did my scans, I used Spy-bot Search and Destroy and Ad-Aware initially. Used them both after booting into safe mode. One of them took out the spyware, but can’t remember which it was. Ran the Zone-Alarm scan last, but the problem was already gone.
I saw this one or one like it pop-up at work. It takes a bit of effort, but it can be killed.
I’ve heard deepening distaste for Norton in general, to the point where it’s non-recommended. Leo Laporte said on air he HATES Norton, which is a pretty strong on-air statement. His general take on it is that in an effort to be more and more “effective” it has been upgraded to the point where either it doesn’t work properly OR it has become a target in and of itself. I agree that AVG is better.
By the way, the act of de-installation of Norton in and of itself is 100% known to block ALL internet access. This happened to my brother (35 year computer dude) and he couldn’t get around it until he went to Leo Laporte’s site and found the workaround...which was suggested by a friend who heard about this on Leo’s radio show. Should you choose to de-install Norton, make sure you get the workaround BEFORE you do so, since (unless you have another computer) you’ll not be able to get the info post-de-installation.
AVG is excellent and free for home users.
Avast is excellent and free for home users.
ThreatFire is excellent and free for home users. It comes with a nifty twist: it has an engine that blocks virus-like behaviors as well as known viruses. Recommended.
www.filehippo.com for AVG and Avast
www.threatfire.com for ThreatFire
Also, go to Start Menu, then Run. Type in:
msconfig
Go to the StartUp tab. Then look and see what programs launch everytime you start your computer.
You can uncheck the programs you do not recognize.
This will not delete the programs. It will simply keep them from launching when you start your computer.
You most likely have Vundo/Virtumonde. It’s hell to get rid of. I tried a whole lot of stuff on a friend’s computer and finally gave up and reformatted. Then another friend got it. I tried a few more things and finally found one that works.
Malwarebytes’ Anti-Malware can be had for FREE from CNET.com.
It removed Vundo! Glory be! You have to run it in safe mode to get it to remove the files that reinstall the program every time you reboot.
Don’t spend any money and happy new year.
I had countless virus problems with XP. Since then, I bought a new computer with the new version of Vista. I have had not one problem since. I have also kept Norton. It caught that same virus you describe (did the identical thing you said.) and it washed it clean. It works fine. I also had many problems with AVG. Hackers have ways around every virus program in existence.
XP has many vulnerabilities and problems. Vista is much better from a security standpoint.
To all you Microsoft bashers on this forum, please refrain from expressing your vile hatred for one of the greatest products known to mankind. It's the main reason we are typing on our keyboards this very moment.
I had this about a month ago..
I unplugged the cat 5 cable to the modem
then I deleted my virus protection
(On another computer I owned)..I went to download.com
and put AVG free addition on a flash drive.
Then I went back to the infected computer with no virus protection and put in the flash drive and installed AVG.
After installation...
I ran a scan...3hrs later it found and quarantined
all Trojans and virus’s that were on my computer.
I haven’t had a problem since!
Hope this helps.