Seen it before...
Download DrWeb Cureit Bootable CD, boot to disk...
After it runs, run full scan, and removes some files, Download, update and run Malwarebytes
Then run combofix.
Sounds like overkill, but each of these tools has a specific way of dealing withViruses:
Drweb is perhaps the best tool to remove *unknowns*
Malwarebytes goes to the rootkit level
Combofix enumerates the registry, and finds those *persistent* virus entries
Hope this helps....
pehaps it would be more helpful if you posted your combofix logs for analysis.
/.Sam
On Fri, Jan 21, 2011 at 1:27 PM, Odhiambo Washington
<odhiambo@gmail.com> wrote:
On Fri, Jan 21, 2011 at 8:26 AM, wallace ngene
<wallacengene@gmail.com> wrote:
Dear folks,
i have a machine that is affected by the conime virus and one cannot
access safe coz it gives out blue screens.
it also crashes the antivirus program while scanning. im using
security essentials which detects the virus as
backdoor:win32/ircbot.gen!
I cant run combofix coz it gives me blue screen while running and
cannot access safe mode.Blue screen.
it also prompts for network login with wierd ip addressess and sends
out links to all your skype contacts
tried a repair but has not worked.I dont want to format the machine.
Any tools out there that can remove the virus or how can i remove it manually?
cheers!
Slave the disk on another machine and clean it.
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Damn!!
_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke