"police" virus leftovers

[spacebar]

Hi all,

 

I have just removed the police virus from a laptop. Everything seems to be working, however, it seems some things are not.

 

The anti-virus software starts on start up, but then quickly closes.

 

And if you try to browse to an anti-virus website in IE a page cannot be displayed error is shown, only on anti virus sites.

 

Also noticed the wireless bars show blank bars as if there is no connection but the laptop is connected.

 

I have tried an Integrity check, and also tried reinstalled the anti-virus software, but it displays a run time error at the end of the install.

 

All very odd.

 

Any one come accross this before?

 

Thanks.

[JB7]

It definitley sounds like you still have some left over issues,

 

Try running RKill - its free. the link is here rkill downloads - Free software downloads and software reviews - CNET Download.com

It will stop any malware/virus processes from running and produce a log to show you what was terminated.

 

It is then important you don't restart because it simply stops proccesses and doesn't delete the problems, but should let you on to an anti-virus website in order to download software, once downloaded run a scan and fingers crossed your issue should be gone

 

Let me know how it goes if you choose this method

[CAM]

Do you have the exact name of the virus from the scan logs or a better description of it? The AV forced closure and blocking of security sites is a very common trick used by malware authors to protect their creation.

[elsiegee40]

Sometimes, it is easier to start again from scratch. .. reinstall windows rather than waste hours trying to fix things.

[spacebar]

Thanks for the replies, I ran the Microsoft malicious software removal tool and it found rundll32 was infected. This has been cleaned now and everything is now working.

 

Wireless bars are still wrong but I can live with that.

[JB7]

Sometimes, it is easier to start again from scratch. .. reinstall windows rather than waste hours trying to fix things.

 

Yeah that's true !

 

Normally whichever method I choose to do the other ends up seeming quicker - Sod's Law ey ?!

[ZeroHour]

Make sure you do anything in safe mode first off, try running a scan now in safe mode to make sure its semi clean.

Also disable the system restore protection, reboot, then turn it back on. Virus's have a habit of leaving a copy of themselves in there to activate later.