Posted on 01/15/2012 9:27:55 AM PST by jim macomber
Brand new computer.
Thanks. Is the rstrui.exe the command for system restore? I did do it in Safe Mode and knew it couldn’t be undone. But the computer is only a week old and I didn’t have much on it so...Thanks again.
Make sure to set up an account for yourself that does NOT have administrator privileges. Use that for all of your random web browsing and general computing. Whenever you go to a site that wants to install crapware, it cannot do it automagically, because you won’t have administrator privileges.
This won’t fix your previous problem, but should help keep you from getting re-infected, or infected with something else.
Why do you Macbots insist on posting the same annoying unhelpful remarks multiple times?
Or did your perfect computer screw up?
Doesn't matter. Back in the days of DOS, there once was a PC maker called Leading Edge (iirc).
They somehow managed to get a virus on the production hard drive that they used for cloning systems onto brand new drives that were installed in new machines...
I was running Avira Anti-Virus, Malwarebytes and Super Anti-Spyware and still got it!
Other sites mentioned that it is a three-letter.exe program. In my computer it showed up as qbs.exe or something like that and I'd hit "end process" in Task Manager and it would go away but then come back as soon as I clicked anything else. Is it possible to actually remove a program in Task Manager?
I've always been leery of messing around in the registry editor but if this does come back - or is in there now, I'll delete any three-letter.exe file. Are there no legitimate three-letter.exe files?
Thanks again.
Because we like learning how to fix our computers?
It’s like asking a gearhead why he doesn’t just ‘buy out of the box’.
Everytime something goes wrong, I learn something new about computers.
Excellent point. Will do.
yep, I was getting the same thing for quite awhile before the virus actually started doing major harm.
never mind that Macs have numerous viruses now. Even the vaunted ipad has been compromised.
but your ‘get a mac’ comments are still useful
Avast or AVG are better than Avira, IMO
There is an exe in user/AppData/Local that is the malware. It is most likely in your startup too. The name of the exe is typically 2 characters, it is randomly generated. Find and delete the exe and remove it from startup. Hope that helps. If it reappears bring up task manager click on the process and then ask for proteries that should give you the location of the exe.
My son had a nasty virus on his computer that deleted his data and program. Restore points (which typically work) didn’t work with this one. Had to boot from the recovery partition. These things are definitely getting more virulent and destructive.
there are many problems with mac, first and foremost the users who come into threads like this with comments like yours.
if macs were so good then Microsoft wouldn’t still own the desktop environment even after all their mis-steps.
You’re so helpful. Why are you so good to us?
What’s up with that little icon in the corner? It looks like two guys kissing.
“You need to have an administrator account to perform these steps.”
What do you do if your pass word to the Admin. Acc. keeps being denied even though you know it to be correct?
Microsoft now has a startup system virus sweeper for download. Info here
http://connect.microsoft.com/systemsweeper
I started on a trs 80 then mac then pc Wife and santa got me a 27 inch i mac Love it but hate the keyboard and the sharp edges Happy sunday
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.